Yellow Duck Weblog 2.1.0 - lang Local File Inclusion

Yellow Duck Weblog 2.1.0 - lang Local File Inclusion =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::Yellow Duck Weblog ------------------------------------------------- Author: ahmadbady...

CVE-2008-6435

Multiple cross-site scripting XSS vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 langhome, 2 langadminmenu, and 3 langadminmenupageoverview parameters to cms/includes/header.inc.php; and the 4 langloginusername and 5 langloginpassword...

Directory traversal

Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter...

CVE-2008-6361

Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the lang parameter to 1 admin.php, 2 index.php, 3 sess.php, 4 stats.php, 5 detail.php, 6 resize.php, and 7 show.php. NOTE: the provenance of this...

CVE-2009-0515

Directory traversal vulnerability in checklang.php in Yet Another NOCC YANOCC 0.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Simple PHP Newsletter 1.5 Local File Inclusion

--:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ---------------------------------------------- ............................................... vul:/mail.php line...

CVE-2008-5894

Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Directory traversal

Directory traversal vulnerability in index.php in Mediatheka 4.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter...

CVE-2008-5764

The CVE-2008-5764 entry affects WorkSimple 1.2.1 and describes a PHP remote file inclusion in calendar.php exploitable when register_globals is enabled. An attacker can supply a URL in the lang parameter to execute arbitrary PHP code. The connected documents confirm the vulnerability details but ...

CVE-2008-5764

PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter...

CVE-2008-5570

Directory traversal vulnerability in index.php in PHP Multiple Newsletters 2.7, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Mediatheka 4.2 (index.php lang) Local File Inclusion Vulnerability

No description provided by source. START 0x01 Informations: Script : Mediatheka 4.2 Download : http://www.hotscripts.com/jump.php?listingid=79106&jumptype=1 Vulnerability : Local File Inclusion Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian Greets: : XaDoS, x0r, emgent,...

CVE-2008-5204

Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter to 1 agb.php, 2 angemeldet.php, 3 anmelden.php, 4 charts.php, 5...

Directory traversal

Multiple directory traversal vulnerabilities in PowerAward 1.1.0 RC1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter to 1 agb.php, 2 angemeldet.php, 3 anmelden.php, 4 charts.php, 5...

CVE-2008-5204

CVE-2008-5204 affects PowerAward 1.1.0 RC1. The vulnerability consists of multiple directory traversal flaws in the lang parameter across 15 PHP scripts (including agb.php, angemeldet.php, anmelden.php, charts.php, external_vote.php, guestbook.php, impressum.php, index.php, rss-reader.php, statis...

Gentoo Security Advisory GLSA 200811-05 (php)

The remote host is missing updates announced in advisory GLSA 200811-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

MySQL Quick Admin 1.5.5 - Local File Inclusion

Author: Vinod Sharma Email: [email protected] Date: 05th Nov, 2008 Note: This information is only for educational purpose, author will not bear responsibility for any damages. Directory traversal vulnerability in MySQL Quick Admin 1.5.5 allows remote attackers to read and execute...

dorsacms-xss.txt

--------------------------------------------------------- Portal Name: Dorsa CMS Vendor : http://www.dorsacms.com Dork: Powered by DorsaCms Author : PouyaServer , [email protected] Vulnerability : XSS Cross site scripting ---------------------------------------------------------...