Unfixed XSS vulnerability at k-2ch.net

Security researcher kusomiso.com, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting k-2ch.net, which at the time of submission ranked 1768149 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is current...

RHEL 4 / 5 : kdebase (RHSA-2007:0905)

Updated kdebase packages that resolve several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop...

[SECURITY] Fedora Core 6 Update: kdebase-3.5.7-1.fc6

Core applications for the K Desktop Environment. Included are: kdm replacement for xdm, kwin window manager, konqueror filemanager, web browser, ftp client, ..., konsole xterm replacement, kpanel application starter and desktop pager, kaudio audio server, kdehelp viewer for kde help files, info a...

kdm password-less login vulnerability

backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote attackers to bypass the password requirement and login to arbitrary accounts via unspecified vectors...

xKiosk 3.0.1i - xkurl.php?PEARPATH Remote File Inclusion

xKiosk 3.0.1i - xkurl.php?PEARPATH Remote File Inclusion xKiosk WEB GoLdM = 4ever ... =P milw0rm.com 2007-10-08...

xKiosk 3.0.1i - 'xkurl.php?PEARPATH' Remote File Inclusion

xKiosk WEB GoLdM = 4ever ... =P milw0rm.com 2007-10-08...

xKiosk 3.0.1i (xkurl.php PEARPATH) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== xKiosk 3.0.1i xkurl.php PEARPATH Remote File Inclusion Vulnerability ====================================================================== xKiosk WEB GoLdM = 4ever...

CVE-2007-5179

Multiple cross-site scripting XSS vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow remote attackers to inject arbitrary web script or HTML via the 1 ad, 2 sehir, 3 yas, 4 cins, 5 tel, 6 mail, and 7 mesaj parameters. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-5179

CVE-2007-5179 describes multiple XSS vulnerabilities in iletisim.asp of Y&K Iletisim Formu. The impact is injection of arbitrary web script/HTML via the parameters ad, sehir, yas, cins, tel, mail, and mesaj, with the note that provenance is from third-party information. Connected documents confir...

PHP-Nuke addon Nuke Mobile Entartainment LFI Vulnerability

No description provided by source. Nuke Mobile Entartainment = modulename Local File Include Vuln Script : Nuke Mobile Entartainment Version : 1 Download : http://www.suonerie-polifoniche-gratis.net/mobilentertainment.zip BorN To K!LL AsbMay's Group ... Vuln. Code : include...

Sisfo Kampus 2006 - 'dwoprn.php?f' Arbitrary File Download

original File name : PUPET-SisfoKampus2006.txt date releases : September 10, 2007 Information : ========================= Advisory Name: Sisfo Kampus 2006 Local File Downloaded Vulnerability Author: k-one A.K.A PUPET Website vendor : http://sisfokampus.net/ Problem : All Local File can downloaded...

[SECURITY] Fedora Core 6 Update: kdegraphics-3.5.7-1.fc6.1

Graphics applications for the K Desktop Environment. Includes: kdvi displays TeX .dvi files kghostview displays postscript files kcoloredit palette editor and color chooser kiconedit icon editor kolourpaint a simple drawing program ksnapshot screen capture utility kview image viewer for GIF, JPEG...

[SECURITY] Fedora 7 Update: kdebase-3.5.7-13.fc7

Core applications for the K Desktop Environment. Included are: kdm replacement for xdm, kwin window manager, konqueror filemanager, web browser, ftp client, ..., konsole xterm replacement, kpanel application starter and desktop pager, kaudio audio server, kdehelp viewer for kde help files, info a...

[SECURITY] Fedora 7 Update: kdegraphics-3.5.7-2.fc7

Graphics applications for the K Desktop Environment, including kamera digital camera support kcoloredit palette editor and color chooser kdvi displays TeX .dvi files kghostview displays postscript files kiconedit icon editor kooka scanner application kpdf displays PDF files kruler screen ruler an...

Important: Red Hat Security Advisory: kdegraphics security update

Updated kdegraphics packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop...

kletter-rfi.txt

++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++ + K-letter 1.0 Remote File include + +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + DownloadScript: http://www.scripts.com.ua/download.php?ID=813 +...

Directory traversal

Directory traversal vulnerability in index.php in Kai Content Management System K-CMS 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currenttheme parameter...

CVE-2007-2106

Directory traversal vulnerability in index.php in Kai Content Management System K-CMS 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currenttheme parameter...

CVE-2007-2106

The CVE-2007-2106 entry concerns Kai Content Management System (K-CMS) 1.0, where index.php is vulnerable to directory traversal via .. in the current_theme parameter, allowing local file inclusion/execution. The underlying issue is a local file inclusion via unvalidated user input in current_the...

battlenet-sql.txt

script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass = $POST'pass'; ..... ..... ..... line 21--...