115 matches found
IDevSpot iSupport 1.8 - rightbar.php?suser Cross-Site Scripting
IDevSpot iSupport 1.8 - rightbar.php?suser Cross-Site Scripting source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an...
IDevSpot iSupport 1.8 - 'index.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19964/info IDevSupport iSupport is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other...
IDevSpot iSupport 1.8 - 'index.php?cons_page_title' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to...
IDevSpot iSupport 1.8 - 'rightbar.php?suser' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to...
IDevSpot iSupport 1.8 - 'open_tickets.php?ticket_id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to...
PhpLinkExchange 1.0 (include/xss) Remote Vulnerabilities
No description provided by source. vendor :www.idevspot.com Demo : www.idevspot.com/demo/PhpStart/PhpLinkExchange By : s3rv3rhack3r www: hackerz.ir & h4ckerz.com remote file include : http://www.domain.com/PhpLinkExchange/bitslistings.php?svrrootPhpStart=shell.txt? xss:...
PhpLinkExchange 1.0 - Include Cross-Site Scripting
PhpLinkExchange 1.0 - Include Cross-Site Scripting vendor :www.idevspot.com Demo : www.idevspot.com/demo/PhpStart/PhpLinkExchange By : s3rv3rhack3r www: hackerz.ir & h4ckerz.com remote file include : http://www.domain.com/PhpLinkExchange/bitslistings.php?svrrootPhpStart=shell.txt? xss:...
text ads xss attack
vendor : www.idevspot.com version : all version By : s3rv3rhack3r www : hackerz.ir & h4ckerz.com http://localhost/textads/clients/delete.php?id=xss http://victim/textads/clients/error.php?errorxss and more...
CVE-2006-3776
PHP remote file inclusion vulnerability in order/index.php in IDevSpot 1 PhpHostBot 1.0 and 2 AutoHost 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2006-3776
PHP remote file inclusion vulnerability in order/index.php in IDevSpot 1 PhpHostBot 1.0 and 2 AutoHost 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2006-3777
PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2006-3776
CVE-2006-3776 affects IDevSpot PhpHostBot (version 1.0) and AutoHost (version 3.0). It is a PHP remote file inclusion vulnerability in order/index.php that allows remote attackers to execute arbitrary PHP code by supplying a URL in the page parameter. The underlying issue is a crafted URL-based i...
CVE-2006-3777
The vulnerability (CVE-2006-3777) affects IDevSpot PhpLinkExchange 1.0. It is a PHP remote file inclusion in index.php, exploitable by supplying a crafted URL in the page parameter, allowing an attacker to execute arbitrary PHP code on the server. The described impact is partial confidentiality, ...
IDevSpot PHPLinkExchange 1.0 - index.php Remote File Inclusion
IDevSpot PHPLinkExchange 1.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19083/info PHPLinkExchange is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...
iSupport 1.x "include_file" SQL inj.
iSupport 1.x "includefile" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/isupport-1x-includefile-sql-inj.html Vendor:http://www.idevspot.com/ Product link:http://www.idevspot.com/index.php?page=pdetail7E1 affected vesion: tested on 1.06...