36 matches found
EUVD-2008-6377
Malware in sbrugna...
EUVD-2007-0363
Malware in sbrugna...
Cross site scripting
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php via /js/frame.js.php because proper filtration is omitted...
Cross site scripting
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame frame.php because proper filtration is omitted...
UBUNTU-CVE-2019-7330
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...
DEBIAN-CVE-2019-7330
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...
CVE-2019-7330
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame frame.php because proper filtration is omitted...
PT-2019-18535 · Zoneminder +3 · Zoneminder +3
Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.4 Description: A Reflected Cross Site Scripting issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable show parameter value in the "view frame" frame.php due to omitted proper...
bluetoad.com XSS vulnerability
Vulnerable URL: http://www.bluetoad.com/publication/frame.php?i=376178==1"...
phpcrs <= 2.06 (importFunction) Local File Inclusion Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs = 2.06 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: phpcrs $ Version: = 2.06 $ File affected: frame.php $ Download:...
IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit
No description provided by source. --+++=======================================================+++-- --+++====== IF-CMS = 2.0 Blind SQL Injection Exploit ======+++-- --+++=======================================================+++-- ?php function query $username, $char, $pos //Increase benchmark...
PHP CRS 3.Za Local File Inclusion
! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 123. elseif isset$POST'btnStartImport' 124. require"../inc/selectSupplierImport.inc.php"; 125. $importFunction = $POST'importFunction'; 126. require"../inc/". $importFunction .".inc.php...
discuz 7.0 frame.php 跨站脚本漏洞
No description provided by source...
Discuz <=7.0(frame.php) xss Vulnerability
Discuz =7.0,这个xss 需要在开启了左右分栏的情况下才可以触发。 Discuz =7.0 http://www.discuz.net/ http://bbs..com/frame.php?frameon=yes&referer=http%3A//bbs.cctv.com/index.php%3Fgid%3D24%22%3E%3C/iframe%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E...
CVE-2008-6408
PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...
Directory traversal
Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the framefile parameter...
CVE-2008-6408
CVE-2008-6408 describes a PHP remote file inclusion in frame.php of ol’bookmarks manager 0.7.5. The vulnerability allows an attacker to cause the application to include a remote file by supplying a URL in the framefile parameter, enabling arbitrary PHP code execution on the server. The reported i...
IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS = 2.0 Blind SQL Injection Exploit". "\n+ Author : darkjoker". "\n+ Site : http://darkjoker.net23.net". "\n+...
Directory traversal
Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the importFunction parameter...
CVE-2008-6074
Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the importFunction parameter...