57 matches found
PT-2017-16788
Name of the Vulnerable Software and Affected Versions Phalcon Eye versions through 0.4.1 Description The issue exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php" URL...
CVE-2017-5960: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php" URL. An attacker could execute arbitrary HTML...
PT-2014-5981
Name of the Vulnerable Software and Affected Versions verweise-wordpress-twitter plugin versions 1.0.2 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the base parameter...
CVE-2014-4566: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in res/faketwitter/frame.php in the "verwei.se - WordPress - Twitter" verweise-wordpress-twitter plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter...
IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit
No description provided by source. --+++=======================================================+++-- --+++====== IF-CMS = 2.0 Blind SQL Injection Exploit ======+++-- --+++=======================================================+++-- ?php function query $username, $char, $pos //Increase benchmark...
phpcrs <= 2.06 (importFunction) Local File Inclusion Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs = 2.06 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: phpcrs $ Version: = 2.06 $ File affected: frame.php $ Download:...
PHP CRS 3.Za Local File Inclusion
! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 123. elseif isset$POST'btnStartImport' 124. require"../inc/selectSupplierImport.inc.php"; 125. $importFunction = $POST'importFunction'; 126. require"../inc/". $importFunction .".inc.php...
discuz 7.0 frame.php 跨站脚本漏洞
No description provided by source...
Discuz <=7.0(frame.php) xss Vulnerability
Discuz =7.0,这个xss 需要在开启了左右分栏的情况下才可以触发。 Discuz =7.0 http://www.discuz.net/ http://bbs..com/frame.php?frameon=yes&referer=http%3A//bbs.cctv.com/index.php%3Fgid%3D24%22%3E%3C/iframe%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E...
CVE-2008-6408
PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...
Directory traversal
Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the framefile parameter...
CVE-2008-6408
CVE-2008-6408 describes a PHP remote file inclusion in frame.php of ol’bookmarks manager 0.7.5. The vulnerability allows an attacker to cause the application to include a remote file by supplying a URL in the framefile parameter, enabling arbitrary PHP code execution on the server. The reported i...
CVE-2008-6407: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the framefile parameter...
CVE-2008-6408: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...
CVE-2009-0528: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in frame.php in Rhadrix If-CMS 2.07 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS = 2.0 Blind SQL Injection Exploit". "\n+ Author : darkjoker". "\n+ Site : http://darkjoker.net23.net". "\n+...
CVE-2008-6074
Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the importFunction parameter...
Directory traversal
Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the importFunction parameter...
CVE-2008-6074: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the importFunction parameter...
phpcrs <= 2.06 / Local File Inclusion Vulnerability (this is the correct :)
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs = 2.06 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: phpcrs $ Version: = 2.06 $ File affected: frame.php $ Download: http://sourceforge.net/projects/phpcrs/ Found by Pepelux...