115 matches found
PhpLinkExchange v1.02 - XSS/Upload Vulerability
No description provided by source. PhpLinkExchange v1.02 - XSS/Upload Vulerability Discovered by : Stink' Date : 2009-12-16 Dork : "PhpLinkExchange v1.02" Website Publisher : http://www.idevspot.com/PhpLinkExchange.php -- XSS in URL --...
iSupport 1.8 XSS / Local File Inclusion
--------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...
iSupport 1.8 - Cross-Site Scripting / Local File Inclusion
--------------------------------------------- ++ iSupport $ ////////////////////////////////////////////////////////////////////// + Vulnerability and Exploitation Dork : "Powered by iSupport 1.8 " --XSS--...
IDevSpot BizDirectory 2.04 - page Cross-Site Scripting
IDevSpot BizDirectory 2.04 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/30980/info IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...
IDevSpot BizDirectory 2.04 - 'page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30980/info IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...
CVE-2008-3679
Multiple cross-site scripting XSS vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web script or HTML via the catid parameter in a 1 useradd, 2 recip, 3 tellafriend, or 4 contact action, or 5 in a request without an action; or 6 the id...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web script or HTML via the catid parameter in a 1 useradd, 2 recip, 3 tellafriend, or 4 contact action, or 5 in a request without an action; or 6 the id...
CVE-2008-3679
The CVE-2008-3679 entry concerns multiple XSS vulnerabilities in index.php of IDevSpot PhpLinkExchange 1.01. According to the data, remote attackers can inject arbitrary web script or HTML via the catid parameter in actions (user_add, recip, tellafriend, contact) or in a request without an action...
CVE-2008-3679
Multiple cross-site scripting XSS vulnerabilities in index.php in IDevSpot PhpLinkExchange 1.01 allow remote attackers to inject arbitrary web script or HTML via the catid parameter in a 1 useradd, 2 recip, 3 tellafriend, or 4 contact action, or 5 in a request without an action; or 6 the id...
CVE-2007-6539
PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the includefile parameter...
iSupport v1.8 Local file include vulnerability
iSupport v1.8 Local file Inclusion Vuln found by JuMp-Er http://www.ahc-security.org Script Name : iSupport version : 1.8 Vendor Site : http://www.idevspot.com/iSupport.php Exploit : http://www.site.com/iSupport/index.php?includefile=local file 3 StRoNiX, mawena, ML, n0th1ng...
iDevSpot iSupport 1.8 - 'index.php' Local File Inclusion
source: https://www.securityfocus.com/bid/26961/info iSupport is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. This issue affects iSupport 1.8;...
Remote file inclusion
PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svrrootscript parameter, a different vector than CVE-2007-4094 and CVE-2006-3776...
CVE-2007-4231
PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svrrootscript parameter, a different vector than CVE-2007-4094 and CVE-2006-3776...
CVE-2007-4231
PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svrrootscript parameter, a different vector than CVE-2007-4094 and CVE-2006-3776...
CVE-2007-4231
CVE-2007-4231 describes a PHP remote file inclusion in the IDevSpot PhpHostBot line (1.06 and earlier). The vulnerability is triggered in order/login.php via a URL parameter (svr_rootscript), allowing an attacker to execute arbitrary PHP code on affected installations. The entry notes this as a d...
Remote file inclusion
PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP code via a URL in the loginform parameter, a different vector than CVE-2006-3776...
CVE-2007-4094
PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP code via a URL in the loginform parameter, a different vector than CVE-2006-3776...