43 matches found
EUVD-2006-6704
Malware in sbrugna...
EUVD-2006-3975
Malware in sbrugna...
EUVD-2006-4000
Malware in sbrugna...
EUVD-2006-4001
Malware in sbrugna...
newsReporter <= 1.1 (index.php) Remote Inclusion Vulnerability
No description provided by source. Kurdish Security newsReporter v1.1 Remote Command Execution Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : newsReporter Site : http://www.knusperleicht.at Code : // removed the old code becau...
k_shoutbox <= 4.4 - Remote File Inclusion Vulnerability
No description provided by source. Kurdish Security ShoutBox Remote Command Execution Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : ShoutBox Site : http://www.knusperleicht.at Code : // // INCLUDE PATH define'SBINCLUDEPATH',...
Knusperleicht Shoutbox 2.6 Shout.php HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21637/info Knusperleicht Shoutbox is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code...
Knusperleicht Shoutbox index.php sb_include_path Parameter PHP Code Execution - Ver2 (CVE-2006-3989)
A code execution vulnerability has been reported in Knusperleicht Shoutbox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Knusperleicht Shoutbox index.php sb_include_path Parameter PHP Code Execution - Ver2 (CVE-2006-3989)
A code execution vulnerability has been reported in Knusperleicht Shoutbox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2006-6721
Multiple cross-site scripting XSS vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 sbNick or 2 sbKommentar parameter...
CVE-2006-6721
CVE-2006-6721 describes multiple cross-site scripting (XSS) vulnerabilities in shout.php of Knusperleicht ShoutBox 2.6. An attacker can remotely inject arbitrary script or HTML by supplying the (1) sbNick or (2) sbKommentar parameter, enabling script execution in the victim’s browser. The affecte...
Knusperleicht Shoutbox 2.6 - 'Shout.php' HTML Injection
source: https://www.securityfocus.com/bid/21637/info Knusperleicht Shoutbox is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the context of the affected...
Knusperleicht NewsReporter News_include_path远程文件包含漏洞
Knusperleicht NewsReporter是一款基于PHP的新闻管理程序。 Knusperleicht NewsReporter不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的"newsincludepath"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht NewsReporter 1.1 http://www.knusperleicht.at/...
Knusperleicht NewsLetter Index.PHP远程文件包含漏洞
Knusperleicht NewsLetter是一款基于PHP的新闻管理程序。 Knusperleicht NewsLetter不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的"NLPATH"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht NewsLetter 3.5 http://knusperleicht.at/index.php?knuspi=phpecke http://example.com/Script...
Knusperleicht ShoutBox SB_Include_Path远程文件包含漏洞
Knusperleicht ShoutBox是一款基于PHP的音乐管理程序。 Knusperleicht ShoutBox不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的"SBINCLUDEPATH"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht ShoutBox 4.4 http://knusperleicht.at/index.php?knuspi=phpecke...
Knusperleicht Quickie Quick_Path远程文件包含漏洞
Knusperleicht Quickie是一款基于PHP的WEB应用程序。 Knusperleicht Quickie不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'quickie.php'脚本对用户提交的"QUICKPATH"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht Quickie http://knusperleicht.at/index.php?knuspi=Quickie...
Knusperleicht FAQ Script Index.PHP远程文件包含漏洞
Knusperleicht FAQ是一款基于PHP的FAQ管理程序。 Knusperleicht FAQ不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的"faqpath"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht FAQ 1.0 http://knusperleicht.at/index.php?knuspi=phpecke...
faqscript.txt
Kurdish Security FAQ Script v1.0 Remote Command Execution Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : FAQ Script Site : http://www.knusperleicht.at Code : //if the script is includet you have to set this path else the path...
quickie.txt
Kurdish Security Quickie Remote Command Execution Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : Kurdish Security FileManager Remote Command Execution Freedom For Ocalan Contact : irc.gigachat.net kurdhack &...
CVE-2006-4007
PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GBPATH parameter...