CVE-2007-0785

The CVE-2007-0785 issue affects Flipsource Flip 2.01-final 1.0 and earlier, where a PHP remote file inclusion in previewtheme.php via the inc_path parameter enables arbitrary PHP code execution. The root cause is a vulnerable inclusion path that accepts attacker-controlled URLs. In public disclos...

Flip 2.01 final (previewtheme.php inc_path) RFI Vulnerability

No description provided by source. Flip-2.01-final 1.0 = Remote File Include Vulnerability Discovered by GolDMMahmnoodali & & Contact: [email protected] URL: http://releases.smallaxesolutions.com/flip-2.01.zip V.CODE: In : path/previewtheme.php include$incpath . "options.php"; include$incpath...

Flip 2.01 final - previewtheme.php?inc_path Remote File Inclusion

Flip 2.01 final - previewtheme.php?incpath Remote File Inclusion Flip-2.01-final 1.0 = Remote File Include Vulnerability Discovered by GolDMMahmnoodali & & Contact: [email protected] URL: http://releases.smallaxesolutions.com/flip-2.01.zip V.CODE: In : path/previewtheme.php include$incpath...

Flip 2.01 final (previewtheme.php inc_path) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================= Flip 2.01 final previewtheme.php incpath RFI Vulnerability ============================================================= Flip-2.01-final 1.0 = Remote File Include Vulnerability...

CVE-2007-0696

Cross-site scripting XSS vulnerability in error messages in Free LAN Intra|ternet Portal FLIP before 1.0-RC3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, different vectors than CVE-2007-0611...

CVE-2007-0695

The CVE-2007-0695 entry concerns Free LAN Intra|net Portal (FLIP) prior to 1.0-RC3, where multiple SQL injection vulnerabilities enable remote execution of arbitrary SQL via unspecified vectors. The note clarifies that certain functions (escape_sqlData, implode_sql, implode_sqlIn) cited by some s...

CVE-2007-0696

CVE-2007-0696 describes an XSS vulnerability in the Free LAN In(tra|ter)net Portal (FLIP) prior to 1.0-RC3. The issue affects error messages and allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, with vectors different from CVE-2007-0611. According to the N...

CVE-2007-0611

Multiple cross-site scripting XSS vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 inc.page.php and 2 inc.text.php...

CVE-2007-0611

The CVE-2007-0611 entry describes XSS vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC2, exploitable via unspecified vectors in the files inc.page.php and inc.text.php. Affected component: FLIP web portal. Impact is the ability to inject arbitrary web script/HTML in the cont...

Flipv3.0.txt

hi... i find a new vub and i want to add the vub on your site... Found By Sp1deRNet .... E-mail....:- [email protected] My Site..... :- WWW.Pal-HackinG.Com //\ Freind Site....:- wWw.SoQoR.Net We Are..:- Sp1deRNet,HackerS Pal,Mohajali. Palstine HackerS Team. -=-=-=-=-=- The Bug In Script :-Fli...

CVE-2005-4365

Multiple cross-site scripting XSS vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter in text.php and 2 frame parameter in forum.php...

CVE-2005-4365

Multiple cross-site scripting XSS vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web script or HTML via the 1 name parameter in text.php and 2 frame parameter in forum.php...

CVE-2005-4365

CVE-2005-4365 describes multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029. An attacker can inject arbitrary web script or HTML via the name parameter in text.php and the frame parameter in forum.php. This document set confirms the affected product and the vulnerable parameter...

FLIP 0.9.0.1029 - 'text.php?name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15947/info FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

FLIP 0.9.0.1029 - 'forum.php?frame' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15947/info FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

FLIP 0.9.0.1029 - forum.php?frame Cross-Site Scripting

FLIP 0.9.0.1029 - forum.php?frame Cross-Site Scripting source: https://www.securityfocus.com/bid/15947/info FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...

FLIP 0.9.0.1029 - text.php?name Cross-Site Scripting

FLIP 0.9.0.1029 - text.php?name Cross-Site Scripting source: https://www.securityfocus.com/bid/15947/info FLIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...