Unfixed XSS vulnerability at www.mafia-news.com

Security researcher Stacker, has submitted on 31/01/2009 a cross-site-scripting XSS vulnerability affecting www.mafia-news.com, which at the time of submission ranked 2272928 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is...

Unfixed XSS vulnerability at www.thepulsarband.com

Security researcher CrashOver, has submitted on 13/12/2008 a cross-site-scripting XSS vulnerability affecting www.thepulsarband.com, which at the time of submission ranked 20347078 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It ...

Unfixed XSS vulnerability at www.nortrade.com

Security researcher CrashOver, has submitted on 07/11/2008 a cross-site-scripting XSS vulnerability affecting www.nortrade.com, which at the time of submission ranked 769325 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/12/2008. It is...

joomlafiliale-sql.txt

Joomla Component Filiale SQL Injection M a f i a C R E W Vulnerability found by: Str0xo Mafia Crew Contact: x02athotmail.de Website: http://www.dz-h4ck3rz.com special tnx to: co2 Greetings: lina-no promises & HIs0k4 ScriptName : 'Joomla' ModuleName : 'Filiale' Version : 1.0.4 DORK 1 :...

Joomla! Component Filiale 1.0.4 - idFiliale SQL Injection

Joomla! Component Filiale 1.0.4 - idFiliale SQL Injection Joomla Component Filiale SQL Injection M a f i a C R E W Vulnerability found by: Str0xo Mafia Crew Contact: x02athotmail.de Website: http://www.dz-h4ck3rz.com special tnx to: co2 Greetings: lina-no promises & HIs0k4 ScriptName : 'Joomla'...

Joomla Component Filiale 1.0.4 (idFiliale) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Joomla Component Filiale 1.0.4 idFiliale SQL Injection Vulnerability ====================================================================== Joomla Component Filiale SQL...

mcGuestbook v1.2 Remote File Inc.

Author: BLaSTER a.K.a Gokhan Title: mcGuestbook v1.2 Remote File Inc. Download: http://www.hotscripts.com/jump.php?listingid=13439&jumptype=1 Contact: [email protected] ecrire.php ------------------ include "$lang"; RFI ------------------ Exploit Code: -------------------...

Mafia Scum Tools Index.PHP远程文件包含漏洞

Mafia Scum Tools是一款基于PHP的WEB应用程序。 Mafia Scum Tools不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Index.PHP'脚本对用户提交的'gen'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mafia Scum Tools Mafia Scum Tools 2.0 目前没有解决方案提供： http://switch.dl.sourceforge.net/sourceforge/adv-random-gen !/usr/bin/perl &n...

CVE-2007-0501

PHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop Advanced Random Generators adv-random-gen allows remote attackers to execute arbitrary PHP code via a URL in the gen parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop Advanced Random Generators adv-random-gen allows remote attackers to execute arbitrary PHP code via a URL in the gen parameter...

CVE-2007-0501

PHP remote file inclusion vulnerability in index.php in Mafia Scum Tools 2.0.0 in Matthew Wardrop Advanced Random Generators adv-random-gen allows remote attackers to execute arbitrary PHP code via a URL in the gen parameter...

CVE-2007-0501

CVE-2007-0501 corresponds to a PHP remote file inclusion vulnerability in Mafia Scum Tools 2.0.0 within Matthew Wardrop Advanced Random Generators (adv-random-gen). The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the gen parameter, enabling remote code execution. T...

Mafia Scum Tools 2.0.0 (index.php gen) Remote File Include Exploit

No description provided by source. !/usr/bin/perl mafia-2-0-0 Index.phpRemote File Include Vulnerability &n...

mafiaMoblog.txt

------------------------------------------------------------------------------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll.ir...

CVE-2006-4156

PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate befor...

CVE-2006-4156

CVE-2006-4156 affects Pearlabs Mafia Moblog versions 6 and earlier. The vulnerability is a PHP remote code execution via the pathtotemplate parameter used in big.php (and possibly related template handling). A third-party dispute notes that pathtotemplate may be defined before its use, and CVE da...

PT-2006-4988 · Pearlabs · Pearlabs Mafia Moblog

Name of the Vulnerable Software and Affected Versions: pearlabs mafia moblog versions 6 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. There is a dispute regarding the validity of this claim, with a third party...

Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability

------------------------------------------------------------------------ ------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------ ------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll....

Mafia Moblog 6 - 'Big.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19458/info Mafia Moblog is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

Mafia Moblog 6 - Big.php Remote File Inclusion

Mafia Moblog 6 - Big.php Remote File Inclusion source: https://www.securityfocus.com/bid/19458/info Mafia Moblog is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...