135 matches found
fuzzylime cms <= 3.01 (admindir) Remote File Inclusion Vulnerability
No description provided by source. .-----------------------------------------------------------------------------. | vuln.: fuzzylime cms = 3.01 Remote File Inclusion Vulnerability | | download: http://cms.fuzzylime.co.uk/ | | dork: "powered by fuzzylime" | | | | author: [email protected]&nb...
fuzzylime-rfi.txt
.-----------------------------------------------------------------------------. | vuln.: fuzzylime cms = 3.01 Remote File Inclusion Vulnerability | | download: http://cms.fuzzylime.co.uk/ | | dork: "powered by fuzzylime" | | | | author: [email protected] | | homepage: http://irk4z.wordpress.com/ | |...
fuzzylime cms <= 3.01 (admindir) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ==================================================================== fuzzylime cms = 3.01 admindir Remote File Inclusion Vulnerability ====================================================================...
Fuzzylime CMS 3.01 - admindir Remote File Inclusion
Fuzzylime CMS 3.01 - admindir Remote File Inclusion .-----------------------------------------------------------------------------. | vuln.: fuzzylime cms = 3.01 Remote File Inclusion Vulnerability | | download: http://cms.fuzzylime.co.uk/ | | dork: "powered by fuzzylime" | | | | author:...
Fuzzylime CMS 3.01 - 'admindir' Remote File Inclusion
.-----------------------------------------------------------------------------. | vuln.: fuzzylime cms = 3.01 Remote File Inclusion Vulnerability | | download: http://cms.fuzzylime.co.uk/ | | dork: "powered by fuzzylime" | | | | author: [email protected] | | homepage: http://irk4z.wordpress.com/ | |...
CVE-2007-4805
Directory traversal vulnerability in getgalldata.php in fuzzylime cms 3.0 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the p parameter...
Directory traversal
Directory traversal vulnerability in getgalldata.php in fuzzylime cms 3.0 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the p parameter...
CVE-2007-4805
CVE-2007-4805 affects fuzzylime (CMS) getgalldata.php in version 3.0 and earlier. A directory traversal flaw lets remote attackers include arbitrary local files by supplying .. in the p parameter. The root cause is unvalidated path input leading to local file inclusion. Public references in conne...
CVE-2007-4805
Directory traversal vulnerability in getgalldata.php in fuzzylime cms 3.0 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the p parameter...
fuzzylime cms getgalldata.php本地文件包含漏洞
fuzzylime cms是一款基于PHP的WEB应用程序。 fuzzylime cms不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于'getgalldata.php'脚本对用户提交的WEB参数缺少过滤，提交系统文件作为包含对象，可导致以WEB权限查看系统文件内容。 fuzzylime cms 3.0 目前没有详细解决方案提供： http://cms.fuzzylime.co.uk/...
fuzzylime cms <= 3.0 Local File Inclusion Vulnerability
No description provided by source. not sec group http://www.notsec.com [email protected] fuzzylime cms = 3.0 Class: Local File Inclusion Found: 08/09/2007 Site: http://cms.fuzzylime.co.uk/ Download: http://cms.fuzzylime.co.uk/files/cms.zip Author: wHITeShEEp of notsec Contact: [email protected]...
fuzzylime cms <= 3.0 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================= fuzzylime cms Exploit: Work only with magicquotesgpc = Off input name="p" type="text" size="30" value="../../../../../../../../ etc/passwd%00"...
Fuzzylime CMS 3.0 - Local File Inclusion
Fuzzylime CMS 3.0 - Local File Inclusion not sec group http://www.notsec.com [email protected] fuzzylime cms Exploit: Work only with magicquotesgpc = Off...
Fuzzylime CMS 3.0 - Local File Inclusion
not sec group http://www.notsec.com [email protected] fuzzylime cms Exploit: Work only with magicquotesgpc = Off...
fuzzylime-xss.txt
Application: fuzzylime Forum Web Site: http://forum.fuzzylime.co.uk/st/front/index/ Versions: 1.01b and below Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: Yes Advisory File: http://www.secvsn.com/content/Advisories/sr-180607-fuzzy.html...
CVE-2007-3267
Cross-site scripting XSS vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inject arbitrary web script or HTML via the fromaction parameter in a log action, a different vector than CVE-2007-3235...
Cross site scripting
Cross-site scripting XSS vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inject arbitrary web script or HTML via the fromaction parameter in a log action, a different vector than CVE-2007-3235...
EUVD-2007-3257
Cross-site scripting XSS vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inject arbitrary web script or HTML via the fromaction parameter in a log action, a different vector than CVE-2007-3235...
CVE-2007-3267
Cross-site scripting XSS vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inject arbitrary web script or HTML via the fromaction parameter in a log action, a different vector than CVE-2007-3235...
CVE-2007-3267
CVE-2007-3267 is a documented XSS in Fuzzylime Forum 1.01b and earlier, exploitable via the fromaction parameter in a log action (distinct vector from CVE-2007-3235). Affected component: low.php; vulnerability arises from improper handling of user-supplied data, permitting remote injection of arb...