AllMyVisitors 0.4.0 File Inclusion Vulnerability

AllMyVisitors 0.4.0 File Inclusion Vulnerability Affected Software: AllMyVisitors 0.4.0 Download: http://www.php-resource.net//modules/AllMyLinks//action/gotolink.php?AMLlinkid=11 Vulnerable Code in index.php Bugfounder: bd0rk +Exploit:...

AllMyLinks <= 0.5.0 (index.php) Remote File Include Vulnerability

No description provided by source. /\ AllMyLinks 0.5.0 ========================================================= Published : 2007-01-07 Remote: Yes Site: http://download.php-resource.net/AllMyLinks/AllMyLinks0.5.0.zip Author: GolDM &nb...

AllMyLinks <= 0.5.0 (index.php) Remote File Include Vulnerability:

/ AllMyLinks 0.5.0 ========================================================= Published : 2007-01-07 Remote: Yes Site: http://download.php-resource.net/AllMyLinks/AllMyLinks0.5.0.zip Author: GolDM Contact: [email protected] ===================================================== ThanX = All My Friends &...

AllMyVisitors 0.4.0 (index.php) Remote File Inclusion Vulnerability

No description provided by source. AllMyVisitors 0.4.0 File Inclusion Vulnerability Affected Software: AllMyVisitors 0.4.0 Download: http://www.php-resource.net//modules/AllMyLinks//action/gotolink.php?AMLlinkid=11 Vulnerable Code in index.php Bugfounder: bd0rk +Exploit:...

AllMyLinks <= 0.5.0 (index.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= AllMyLinks = 0.5.0 index.php Remote File Include Vulnerability ================================================================= /\ AllMyLinks 0.5.0...

AllMyVisitors 0.4.0 - 'index.php' Remote File Inclusion

AllMyVisitors 0.4.0 File Inclusion Vulnerability Affected Software: AllMyVisitors 0.4.0 Download: http://www.php-resource.net//modules/AllMyLinks//action/gotolink.php?AMLlinkid=11 Vulnerable Code in index.php Bugfounder: bd0rk +Exploit:...

CVE-2006-6877: Undefined Security Weakness

Directory traversal vulnerability in index.php in Matteo Lucarelli 3editor CMS 0.42 and earlier, when registerglobals is enabled, allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...

CVE-2007-0050: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parameter. NOTE: this issue has been disputed by the developer and a third party, since the variable is set before use. CVE analysis suggests th...

PT-2007-1543 · Openpinboard · Openpinboard

Name of the Vulnerable Software and Affected Versions: OpenPinboard version 2.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the language parameter in index.php. However, it has been disputed by the developer and a third party, as the variable is set...

openpinboard-rfi.txt

====================================================================================== OpenPinboard = Remote File Include ====================================================================================== Scripts: OpenPinboard Download...

CVE-2006-4577

CVE-2006-4577 affects The Address Book 1.04e. It contains multiple cross-site scripting (XSS) vulnerabilities allowing an attacker to inject arbitrary scripts via: (1) email, (2) websites, (3) groupAddName in save.php; (4) errorMsg in index.php; (5) goTo and (6) search in search.php. CVSS v2 base...

CVE-2006-4577

Multiple cross-site scripting XSS vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 email, 2 websites, and 3 groupAddName parameters in a save.php; the 4 errorMsg parameter in b index.php; and the 5 goTo and 6...

CVE-2006-6845

CVE-2006-6845 : CMS Made Simple 1.0.2 has a Cross-site scripting (XSS) vulnerability in index.php via the cntnt01searchinput parameter in a Search action, allowing remote attackers to inject arbitrary web script or HTML. The provided documents do not include remediation steps or fixed versions.

CVE-2006-6845: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action...

CVE-2006-4577: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 email, 2 websites, and 3 groupAddName parameters in a save.php; the 4 errorMsg parameter in b index.php; and the 5 goTo and 6...

CVE-2006-6849: Undefined Security Weakness

administration/index.php in Cahier de texte CDT 2.2 does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions...

CVE-2006-4577

Multiple cross-site scripting XSS vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 email, 2 websites, and 3 groupAddName parameters in a save.php; the 4 errorMsg parameter in b index.php; and the 5 goTo and 6...

CVE-2006-6769

CVE-2006-6769 applies to PHP Live! 3.2.2 and earlier, with multiple XSS flaws. Vulnerable components/files include transcripts.php (search_string parameter), index.php (l parameter), phplive/index.php (login field), and phplive/message_box.php (deptid and x parameters). Exploits describe arbitrar...

CVE-2006-6757

The CVE-2006-6757 entry concerns a directory traversal vulnerability in cwmExplorer 1.0, specifically in index.php via the show_file parameter, enabling remote attackers to read arbitrary files and source code and obtain sensitive information. The NVD entry lists a CVSS v2 base score of 7.8 (HIGH...

CVE-2006-6757: Undefined Security Weakness

Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and source code, and obtain sensitive information via directory traversal sequences in the showfile parameter...