42 matches found
Adobe Shockwave Player Director File FFFFFF88 Record Integer Overflow (CVE-2010-2876; CVE-2010-4192)
Adobe Shockwave is a multimedia player that allows users to view interactive web content such as games, business presentations, entertainment, and advertisements from the web browser. It allows Adobe Director applications to be published on the Internet and viewed in a web browser on systems whic...
Interactive Web Solutions CMS SQL Injection Vulnerability
Exploit for php platform in category web applications ========================================================= Interactive Web Solutions CMS SQL Injection Vulnerability ========================================================= EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verifie...
CVE-2006-2744
PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...
CVE-2006-2745
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathfile parameter in a p-editpage.php and b p-editbox.php, and the 2 mytheme and 3 myskin...
Remote file inclusion
PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathfile parameter in a p-editpage.php and b p-editbox.php, and the 2 mytheme and 3 myskin...
CVE-2006-2744
PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...
CVE-2006-2746
The vulnerability is in F@cile Interactive Web 0.8.5 and earlier, where multiple XSS flaws exist. Specifically, the application accepts user-supplied input through (1) lang in index.php and (2) mytheme and (3) myskin in various p-themes’ index.inc.php files (including lowgraphic, classic, puzzle,...
CVE-2006-2744
CVE-2006-2744 affects F@cile Interactive Web versions 0.8.41–0.8.5. The vulnerability is a PHP remote file inclusion via the l parameter in p-popupgallery.php, allowing remote code execution. Affected component is the PHP code path handling URL input; exploitation would grant an attacker remote P...
CVE-2006-2745
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathfile parameter in a p-editpage.php and b p-editbox.php, and the 2 mytheme and 3 myskin...
CVE-2006-2746
Multiple cross-site scripting XSS vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 lang parameter in index.php, and the 2 mytheme and 3 myskin parameters in multiple "p-themes" index.inc.php files including c...
CVE-2006-2745
CVE-2006-2745 describes multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier when register_globals is enabled. An attacker can cause arbitrary PHP code execution by specifying a URL in (1) the pathfile parameter of (a) p-editpage.php and (b) p-editbox.php...
Advisory: F@cile Interactive Web <= 0.8x Multiple Remote Vulnerabilities.
--Security Report-- Advisory: F@cile Interactive Web = 0.8x Multiple Remote Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 05:57 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Facile...
[email protected] Interactive Web <= 0.8x Remote (Include / XSS) Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== email protected Interactive Web = 0.8x Remote Include / XSS Vulnerabilities ===================================================================== email protected...
F@cile Interactive Web 0.8x - Remote File Inclusion / Cross-Site Scripting
F@cile Interactive Web ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on F@cile Interactive Web = 0.8x Original advisory can be found at: http://www.nukedx.com/?viewdoc=35 File Inclusion Vulnerabilities...
F@cile Interactive Web 0.8x - Remote File Inclusion Cross-Site Scripting
F@cile Interactive Web 0.8x - Remote File Inclusion Cross-Site Scripting F@cile Interactive Web ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on F@cile Interactive Web = 0.8x Original advisory can be found at: http://www.nukedx.com/?viewdoc=35 File Inclusion...
CVE-2000-0922
Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program shopper.cgi 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the newpage parameter...
CVE-2000-0922
Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program shopper.cgi 2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot attack on the newpage parameter...
Security Advisory: Bytes Interactive's Web Shopper (shopper.cgi) Directory Traversal Vulnerability
October 8, 2000 Security Advisory: Bytes Interactive's Web Shopper shopper.cgi Directory Traversal Vulnerability Affected Product/Versions: Bytes Interactive's Web Shopper shopper.cgi Version 1.0 Bytes Interactive's Web Shopper shopper.cgi Version 2.0 Affected Platforms: Unix Windows Overview: Th...
Bytes Interactive Web Shopper shopper.cgi Traversal Arbitrary File Access
The remote host contains is running Byte's Interactive Web Shopper, a shopping cart application. The installed version allows for retrieval of arbitrary files from the web server. %NASLMINLEVEL 70300 This script was written by Thomas Reinke See the Nessus Scripts License for details Changes by...