Cross site scripting

Cross-site scripting XSS vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a call to the iah/iah.xis IsisScript code, possibly involving the lang or exprSearch parameter...

CVE-2007-4872

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php; or a direct request to 2 admin/dbginfos.php, 3 admin/heading.php, or 4 evsearch.php; which reveals the path in various error messages...

CVE-2007-5130

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php or 2 a direct request to admin/trailer.php, which reveals the path in various error messages...

FrontAccounting 1.13 Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== FrontAccounting 1.13 Remote File Inclusion Vulnerabilities ========================================================== ?????????? ??????????????? ???????????????????...

PHPress 0.2.0 - adisplay.php?lang Local File Inclusion

PHPress 0.2.0 - adisplay.php?lang Local File Inclusion :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,||...

phpress 0.2.0 (adisplay.php lang) Local File Inclusion Vulnerability

No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | //...

Sql injection

Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to execute arbitrary SQL commands via the lang variable to the 1 user or 2 admin logon page, a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco CallManager and Unified Communications Manager CUCM before 3.35sr2b, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allow remote attackers to inject arbitrary web script or HTML via the lang variable to the 1 user or 2 adm...

phpress020-rfi.txt

:::::::::::::::::::::::::::::::::::::::::::::::::::..................... .. ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | // :::::::::::::::::::::::::::::We...

FrontAccounting 1.12 build 31 - Remote File Inclusion

FrontAccounting 1.12 build 31 - Remote File Inclusion ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability ================================================================= ?????????? ???????????????...

FrontAccounting 1.12 build 31 - Remote File Inclusion

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...

[Aria-security] itcms 0.2 Cross-site Scripting (XSS)

Aria-Security Tilte: itcms 0.2 Cross-site Scripting XSS www.Aria-security.Com For English www.Aria-Security.net For Persian Author: YouYou Software: itcms Site Script:http://sourceforge.net/projects/itcms/ proof Of Concept : local/path/lang-en.php?wndtitle=Xss-script...

CVE-2007-3619

Directory traversal vulnerability in login.php in Maia Mailguard 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

Directory traversal

Directory traversal vulnerability in qticheckname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local files a .. dot dot in the lang parameter...

CVE-2007-3547

Directory traversal vulnerability in qticheckname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local files a .. dot dot in the lang parameter...

Directory traversal

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

CVE-2007-3523

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

CVE-2007-3505

Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot sequence in the lang parameter to 1 qtfcheckname.php, 2 qtfjbirth.php, or 3 qtfjexists.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...