ZZ FlashChat <= (help.php) 3.1 Local File Inclusion Vulnerability

No description provided by source. Title : ZZ:FlashChat Local File Inclusion Vulnerability Source : http://download.zehnet.de/index.php Author : d3hydr8 Homepage : http://www.darkc0de.com Vuln: : /chat/admin/inc/help.php?file=LFI...

ZZ FlashChat 3.1 - help.php Local File Inclusion

ZZ FlashChat 3.1 - help.php Local File Inclusion Title : ZZ:FlashChat Local File Inclusion Vulnerability Source : http://download.zehnet.de/index.php Author : d3hydr8 Homepage : http://www.darkc0de.com Vuln: : /chat/admin/inc/help.php?file=LFI milw0rm.com 2007-10-19...

ZZ FlashChat 3.1 - 'help.php' Local File Inclusion

Title : ZZ:FlashChat Local File Inclusion Vulnerability Source : http://download.zehnet.de/index.php Author : d3hydr8 Homepage : http://www.darkc0de.com Vuln: : /chat/admin/inc/help.php?file=LFI milw0rm.com 2007-10-19...

CVE-2004-2741: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the "help window" help.php in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the 1 module, 2 topic, or 3 module parameters...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in gnuedu 1.3b2 allow remote attackers to execute arbitrary PHP code via a URL in the a ETCDIR parameter to 1 libs/lom.php; 2 lomupdate.php, 3 check-lom.php, and 4 weighkeywords.php in scripts/; the b LIBSDIR parameter to 5 logout.php, 6 help.php...

CVE-2007-2609

CVE-2007-2609 affects gnuedu 1.3b2 with multiple PHP remote file inclusion vulnerabilities . An attacker can trigger arbitrary PHP code execution by supplying untrusted values to the ETCDIR parameter for files/libs (libs/lom.php; lom_update.php; check-lom.php; weigh_keywords.php; web/lom.php) and...

CVE-2007-1620: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...

PHP DB Designer <= 1.02 Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== PHP DB Designer = 1.02 Remote File Include Vulnerabilities =========================================================== PHP DB Designer = 1.02 Remote File Include Exploit D.Script:...

CVE-2006-5149: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the page parameter to shared/help.php or 2 the tab parameter to shared/header.php...

CVE-2006-4938

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message...

CVE-2006-4938: Undefined Security Weakness

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message...

CVE-2006-4938

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message...

CVE-2006-4938

Moodle before 1.6.2 contains a vulnerability in help.php where it does not verify the existence of certain help files before including them, which may allow a remote authenticated user to cause an error message that reveals the file path. The CVE is documented in multiple sources (NVD entry for C...

CVE-2006-4786

Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via 1 help.php and 2 other unspecified vectors involving scheduled backups...

CVE-2006-4786

Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via 1 help.php and 2 other unspecified vectors involving scheduled backups...

CVE-2006-4786: Undefined Security Weakness

Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via 1 help.php and 2 other unspecified vectors involving scheduled backups...

vikingMultiple.txt

================================================ :: Vikingboard 0.1b Multiple Vulnerabilities :: ================================================ Software : Vikingboard Website : http://www.vikingboard.com/ Discover : Hessam-x / www.hessamx.net I. Cross Site Scripting Vulnerabilities...

CVE-2006-4708

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the 1 act parameter in a help.php and b search.php, and the 2 p parameter in report.php...

CVE-2006-4708

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the 1 act parameter in a help.php and b search.php, and the 2 p parameter in report.php...

CVE-2006-4708: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the 1 act parameter in a help.php and b search.php, and the 2 p parameter in report.php...