EUVD-2007-0363

Malware in sbrugna...

EUVD-2008-6377

Malware in sbrugna...

Cross site scripting

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php because proper filtration is omitted...

DEBIAN-CVE-2019-7330

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...

Cross site scripting

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php via /js/frame.js.php because proper filtration is omitted...

UBUNTU-CVE-2019-7330

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...

CVE-2019-7330

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...

PT-2019-18535 · Zoneminder +3 · Zoneminder +3

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.4 Description: A Reflected Cross Site Scripting issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable show parameter value in the "view frame" frame.php due to omitted proper...

bluetoad.com XSS vulnerability

Vulnerable URL: http://www.bluetoad.com/publication/frame.php?i=376178==1"...

IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit

No description provided by source. --+++=======================================================+++-- --+++====== IF-CMS = 2.0 Blind SQL Injection Exploit ======+++-- --+++=======================================================+++-- ?php function query $username, $char, $pos //Increase benchmark...

phpcrs <= 2.06 (importFunction) Local File Inclusion Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs = 2.06 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: phpcrs $ Version: = 2.06 $ File affected: frame.php $ Download:...

PHP CRS 3.Za Local File Inclusion

! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 123. elseif isset$POST'btnStartImport' 124. require"../inc/selectSupplierImport.inc.php"; 125. $importFunction = $POST'importFunction'; 126. require"../inc/". $importFunction .".inc.php...

discuz 7.0 frame.php 跨站脚本漏洞

No description provided by source...

Discuz &lt;=7.0(frame.php) xss Vulnerability

Discuz =7.0,这个xss 需要在开启了左右分栏的情况下才可以触发。 Discuz =7.0 http://www.discuz.net/ http://bbs..com/frame.php?frameon=yes&referer=http%3A//bbs.cctv.com/index.php%3Fgid%3D24%22%3E%3C/iframe%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E...

CVE-2008-6408

PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...

Directory traversal

Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the framefile parameter...

CVE-2008-6408

CVE-2008-6408 describes a PHP remote file inclusion in frame.php of ol’bookmarks manager 0.7.5. The vulnerability allows an attacker to cause the application to include a remote file by supplying a URL in the framefile parameter, enabling arbitrary PHP code execution on the server. The reported i...

IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS = 2.0 Blind SQL Injection Exploit". "\n+ Author : darkjoker". "\n+ Site : http://darkjoker.net23.net". "\n+...

CVE-2008-6074

Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the importFunction parameter...

Directory traversal

Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the importFunction parameter...