JAG (Just Another Guestbook) Detection (HTTP)

HTTP based detection of Just Another Guestbook JAG. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-0665

CVE-2010-0665 relates to JAG (Just Another Guestbook) 1.14. The issue is an information disclosure due to insufficient access control: an attacker can directly request jag/database.sql from the web root to obtain sensitive data. The NVD entry cites a base score of 5.0 (Medium) with network attack...

WAR-FTPD 1.65 Denial Of Service

WAR-FTPD 1.65 MKD & CD requests Remote Denial of Service exploited by opt!x hacker mail: [email protected] greetz to his0k4 about : http://securityreason.com/exploitalert/6971 you have to connect to target server from cmd like that: i sended it with perl and python scripts but it's not working because i...

Unfixed XSS vulnerability at just-ping.com

Security researcher CCC, has submitted on 06/06/2008 a cross-site-scripting XSS vulnerability affecting just-ping.com, which at the time of submission ranked 126234 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

Design/Logic Flaw

admin/setup.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to read and modify configuration settings via a direct request...

CVE-2007-3192

admin/setup.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to read and modify configuration settings via a direct request...

CVE-2007-3192

admin/setup.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to read and modify configuration settings via a direct request...

Sql injection

Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System JFFNMS 0.8.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 pass parameters...

CVE-2007-3190

CVE-2007-3190 involves multiple SQL injection flaws in Just For Fun Network Management System (JFFNMS) 0.8.3, specifically in auth.php. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via the user and pass parameters when magic_quotes_gpc is disabled. Public advisorie...

CVE-2007-3192

admin/setup.php in Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to read and modify configuration settings via a direct request...

Unfixed XSS vulnerability at just-in.co.uk

Security researcher St@rExT, has submitted on 22/04/2007 a cross-site-scripting XSS vulnerability affecting just-in.co.uk, which at the time of submission ranked 6120747 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/04/2007. It is currentl...

Unfixed XSS vulnerability at just-in.co.uk

Security researcher St@rExT, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting just-in.co.uk, which at the time of submission ranked 6120747 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is currentl...

CVE-2004-1504

The displaycontent function in config.php for Just Another Flat file JAF CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php...

CVE-2004-1505

Directory traversal vulnerability in index.php in Just Another Flat file JAF CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. dot dot in the show parameter...

CVE-2004-1505

Directory traversal vulnerability in index.php in Just Another Flat file JAF CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. dot dot in the show parameter...