70 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters to help.php, or 3 picfileXXX parameter to searchnew.php...
CVE-2010-4693
Multiple cross-site scripting XSS vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters to help.php, or 3 picfileXXX parameter to searchnew.php...
phpmps 2.0 GBK Help.php $keywords SQL注入漏洞
php分类信息发布系统是一款免费开源的分类信息程序,适用于建立本地信息站点 Help.php 文件，取得keywords的值，只用trim函数，去除了首位空，直接带入sql查询 //取得文章列表 $keyword = !empty$REQUEST'keywords' ? trim$REQUEST'keywords' : ''; $typeid = !empty$REQUEST'typeid' ? intval$REQUEST'typeid' : 0; if!empty$keyword $arr = array; $keywords = 'AND '; $keywords .= "titl...
Bitrix Site Manager Remote File Inclusion
Author : Don Tukulesto [email protected] + Date : November 13, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : http://www.bitrixsoft.com/ + Method : Remote File Inclusion + Location : INDONESIA Notes : I know this is an old bugs, but i just write this exploit under perl module...
Bitrix Site Manager Multiple Remote File Include Vulnerability
No description provided by source. + Author : Don Tukulesto [email protected] + Date : November 13, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : http://www.bitrixsoft.com/ + Method : Remote File Inclusion + Location : INDONESIA Notes : I know this is an old bugs, but i just...
CVE-2009-2081
Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the module parameter...
CVE-2009-1445
Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to 1 read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and 2 include and execute arbitrary local files via directory traversal sequences in the...
CVE-2008-6201
Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter. NOTE: some of these details are obtained from third party information...
Unfixed XSS vulnerability at phpsnips.com
Security researcher GTADarkDude, has submitted on 15/08/2008 a cross-site-scripting XSS vulnerability affecting phpsnips.com, which at the time of submission ranked 1996003 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is...
BBlog 0.7.6 (mod) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================== BBlog 0.7.6 mod Remote SQL Injection Vulnerability ==================================================== BBlog 0.7.6 SQL Injection Vuln Vulnpath: /bblogplugins/builtin.help.php Vuln:...
CVE-2008-3565
Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...
Meeting Room Booking System (MRBS) 1.2.6 - help.php Cross-Site Scripting
Meeting Room Booking System MRBS 1.2.6 - help.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30531/info MRBS Meeting Room Booking Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
CVE-2008-3384
CVE-2008-3384 affects Interact Learning Community Environment Interact 2.4.1. Multiple directory traversal vulnerabilities in help/help.php allow remote attackers to include and execute arbitrary local files via a .. in the (1) module and (2) file parameters. The NVD entry notes a CVSS v2 base sc...
talkback-lfi.txt
============================================================================================================= o TalkBack 2.3.5 Local File Inclusion Vulnerability Software : TalkBack version 2.3.5 Vendor : http://www.scripts.oldguy.us/talkback Author : NoGe Contact : nogedotcodeatgmaildotcom...
TalkBack 2.3.5 (language) Local File Inclusion Vulnerability
No description provided by source. ============================================================================================================= o TalkBack 2.3.5 Local File Inclusion Vulnerability Software : TalkBack version 2.3.5 Vendor : http://www.scripts.oldguy.us/talkback Author : NoGe Conta...
TalkBack 2.3.5 - Language Local File Inclusion
TalkBack 2.3.5 - Language Local File Inclusion ============================================================================================================= o TalkBack 2.3.5 Local File Inclusion Vulnerability Software : TalkBack version 2.3.5 Vendor : http://www.scripts.oldguy.us/talkback Author ...
TalkBack 2.3.5 - 'Language' Local File Inclusion
============================================================================================================= o TalkBack 2.3.5 Local File Inclusion Vulnerability Software : TalkBack version 2.3.5 Vendor : http://www.scripts.oldguy.us/talkback Author : NoGe Contact : nogedotcodeatgmaildotcom...
ZZ FlashChat <= (help.php) 3.1 Local File Inclusion Vulnerability
No description provided by source. Title : ZZ:FlashChat Local File Inclusion Vulnerability Source : http://download.zehnet.de/index.php Author : d3hydr8 Homepage : http://www.darkc0de.com Vuln: : /chat/admin/inc/help.php?file=LFI...
ZZ FlashChat 3.1 - help.php Local File Inclusion
ZZ FlashChat 3.1 - help.php Local File Inclusion Title : ZZ:FlashChat Local File Inclusion Vulnerability Source : http://download.zehnet.de/index.php Author : d3hydr8 Homepage : http://www.darkc0de.com Vuln: : /chat/admin/inc/help.php?file=LFI milw0rm.com 2007-10-19...
ZZ FlashChat 3.1 - 'help.php' Local File Inclusion
Title : ZZ:FlashChat Local File Inclusion Vulnerability Source : http://download.zehnet.de/index.php Author : d3hydr8 Homepage : http://www.darkc0de.com Vuln: : /chat/admin/inc/help.php?file=LFI milw0rm.com 2007-10-19...