960 matches found
CVE-2009-4541
Multiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 newticket.php or 2 rempass.php, or a URL in the lang parameter in an adduser action to 3 index.php. NOTE: this can also be...
Improper access control
DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and configuration information, log data, and gain administrative access via a direct request to scripts in 1 templates/ including 2 templates/deluxe/admincp/...
DeluxeBB 1.3 - Multiple Vulnerabilities
DeluxeBB 1.3 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagEShift+2gmail.com Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang...
Real Estate Manager 1.0.1 XSS
Title: Real Estate Manager 1.0.1 - XSS /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Real Estate Manager 1.0.1 - XSS // Author Info x Author: bi0 x Contact: [email protected] x Homepage...
SLES11: Security update for glib2
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: glib2 glib2-doc glib2-lang libgio-20-0 libglib-20-0 libgmodule-20-0 libgobject-20-0 libgthread-20-0 More details may also be found by searching for the SuSE...
SuSE 11 Security Update : Epiphany (SAT Patch Number 1342)
This update fixes a regression with the epiphany browser which did not work with the newer Mozilla XULRunner 1.9.1 engine. Epiphany now explicitly uses the old 1.9.0 engine again. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
MiniCWB 2.3.0 - 'lang' Remote File Inclusion
================================================================================================ o MiniCWB 2.3.0 Multiple Remote File Inclusion Vulnerability Software : MiniCWB version 2.3.0 Vendor : http://www.grafxsoftware.com/ Download :...
CVE-2009-2449
Directory traversal vulnerability in maillinglist/admin/changeconfig.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pathtolang parameter...
Directory traversal
Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to 1 read portions of arbitrary files via a .. dot dot and a ..\ dot dot backslash in the lang parameter to main/exercice/hotspotlangconversion.php and 2 read arbitrary files via a .. dot do...
Coppermine Photo Gallery 'lang' Cookie参数本地文件包含漏洞
Bugraq ID: 30480 CNCAN ID：CNCAN-2009052002 Coppermine Photo Gallery是一款基于WEB的图库程序。 Coppermine Photo Gallery不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 在用于包含文件钱传递给"GLOBALSUSERlang"的参数不正确过滤，可导致提交特殊请求以WEB权限查看系统文件内容。 Coppermine Photo Gallery 1.4.22 Coppermine Photo Gallery 1.4.21 Coppermine Photo Gallery...
CVE-2009-1319
Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute arbitrary files via a .. dot dot in the lang parameter to index.php...
GuestCal 2.1 - index.php?lang Local File Inclusion
GuestCal 2.1 - index.php?lang Local File Inclusion + GuestCal 2.1 index.php lang Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Download script : http://guestcal.com/de/download + Local File Inclusion - PoC :...
Yellow Duck Weblog 2.1.0 - lang Local File Inclusion
Yellow Duck Weblog 2.1.0 - lang Local File Inclusion =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::Yellow Duck Weblog ------------------------------------------------- Author: ahmadbady...
CVE-2008-6435
Multiple cross-site scripting XSS vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 langhome, 2 langadminmenu, and 3 langadminmenupageoverview parameters to cms/includes/header.inc.php; and the 4 langloginusername and 5 langloginpassword...
Directory traversal
Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter...
CVE-2008-6361
Directory traversal vulnerability in index.php in InSun Feed CMS 1.7.3 19Beta allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lang parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in PhpForums.net mcGallery 1.1 allow remote attackers to inject arbitrary web script or HTML via the lang parameter to 1 admin.php, 2 index.php, 3 sess.php, 4 stats.php, 5 detail.php, 6 resize.php, and 7 show.php. NOTE: the provenance of this...
CVE-2009-0515
Directory traversal vulnerability in checklang.php in Yet Another NOCC YANOCC 0.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...
Simple PHP Newsletter 1.5 Local File Inclusion
--:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ---------------------------------------------- ............................................... vul:/mail.php line...