Lucene search
+L

4774 matches found

NVD
NVD
•added 2006/08/01 10:04 p.m.•18 views

CVE-2006-3966

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups : 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myngroot parameter...

7.5CVSS7.6AI score0.04402EPSS
SaveExploits2References10
Cvelist
Cvelist
•added 2006/08/01 10:00 p.m.•30 views

CVE-2006-3966

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups : 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myngroot parameter...

7.6AI score0.04402EPSS
SaveExploits2References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/08/01 12:00 a.m.•5 views

CVE-2006-3966: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups : 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myngroot parameter...

7.5CVSS6.4AI score0.04402EPSS
SaveExploits2References2
exploitpack
exploitpack
•added 2006/07/31 12:00 a.m.•22 views

MyNewsGroups 0.6b - myng_root Remote Inclusion

MyNewsGroups 0.6b - myngroot Remote Inclusion +-------------------------------------------------------------------- + + MyNewsGroups : v. 0.6b = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: MyNewsGroups : v. 0.6b + Venedor...

7.5AI score
SaveExploits0
seebug.org
seebug.org
•added 2006/07/31 12:00 a.m.•26 views

MyNewsGroups <= 0.6b (myng_root) Remote Inclusion Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + MyNewsGroups : v. 0.6b = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: MyNewsGroups : v. 0.6b + Venedor ..............

7.1AI score
SaveExploits0
zdt
zdt
•added 2006/07/31 12:00 a.m.•24 views

MyNewsGroups <= 0.6b (myng_root) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== MyNewsGroups = 0.6b myngroot Remote Inclusion Vulnerability ===============================================================...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/07/31 12:00 a.m.•49 views

MyNewsGroups 0.6b - 'myng_root' Remote Inclusion

+-------------------------------------------------------------------- + + MyNewsGroups : v. 0.6b = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: MyNewsGroups : v. 0.6b + Venedor ...........: http://mynewsgroups.sourceforge.n...

7.5CVSS5.8AI score0.04402EPSS
SaveExploits2
Cvelist
Cvelist
•added 2006/06/22 10:00 p.m.•34 views

CVE-2006-3151

Cross-site scripting XSS vulnerability in index.php in AssoCIateD aka ACID 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter...

5.7AI score0.0188EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/22 12:00 a.m.•4 views

CVE-2006-3151: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in AssoCIateD aka ACID 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter...

4.3CVSS6AI score0.0188EPSS
SaveExploits1References1
exploitpack
exploitpack
•added 2006/06/13 12:00 a.m.•24 views

CEScripts (Multiple Scripts) - Cross-Site Scripting

CEScripts Multiple Scripts - Cross-Site Scripting source: https://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/06/13 12:00 a.m.•34 views

CEScripts (Multiple Scripts) - Cross-Site Scripting

source: https://www.securityfocus.com/bid/18402/info CEScripts scripts are prone to multiple cross-site scripting vulnerabilities because they fail to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

6.8CVSS5.8AI score0.01842EPSS
SaveExploits1
Packet Storm
Packet Storm
•added 2006/06/12 12:00 a.m.•28 views

fxAPPXSS.txt

fx-APP Version 0.0.8.1 Homepage: http://fx-app.org/ Effected files: search input box index.cgi input boxes on your profile adding a menu item ------------------------------------------------------- I noticed there was already several BID's on the a script WebAPP:...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/06/11 12:00 a.m.•43 views

fx-APP Version 0.0.8.1

fx-APP Version 0.0.8.1 Homepage: http://fx-app.org/ Effected files: search input box index.cgi input boxes on your profile adding a menu item ------------------------------------------------------- I noticed there was already several BID's on the a script WebAPP:...

6.6AI score
SaveExploits0
Mozilla
Mozilla
•added 2006/06/01 12:00 a.m.•44 views

XSS viewing javascript: frames or images from context menu — Mozilla

Paul Nickerson demonstrated that if an attacker could convince a user to right-click on a broken image and choose "View Image" from the context menu then he could get javascript to run on a site of the attacker's choosing by making the image src attribute a javascript: URL and loading the target...

4.3CVSS1.8AI score0.01548EPSS
SaveExploits0References3Affected Software2
myhack58
myhack58
•added 2006/05/23 12:00 a.m.•28 views

Hidden in the conspiracy behind the browser hijack attack and Defense-bug warning-the black bar safety net

“Browser hijacking”, the popular point said is deliberately misleading browser the route of a phenomenon, a common browser hijacker phenomenon:to access the normal site is diverted to a malicious Web page, when input the wrong URL was transferred to the hijacking software the specified website,...

0.3AI score
SaveExploits0
Cvelist
Cvelist
•added 2006/04/25 10:00 a.m.•48 views

CVE-2006-1999

The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an incorrect size, which causes the client to return to the main menu...

6.4AI score0.09147EPSS
SaveExploits2References8
CVE
CVE
•added 2006/04/25 10:00 a.m.•63 views

CVE-2006-1999

CVE-2006-1999 affects OpenTTD 0.4.7. The vulnerability is a flaw in the multiplayer packet handling where a UDP packet of an incorrect size can cause the client to return to the main menu, yielding a denial of service in affected clients. The issue stems from improper processing of command packet...

5CVSS6.4AI score0.09147EPSS
SaveExploits2References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/04/25 12:00 a.m.•4 views

CVE-2006-1999: Undefined Security Weakness

The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an incorrect size, which causes the client to return to the main menu...

5CVSS5.9AI score0.09147EPSS
SaveExploits2References1
zdt
zdt
•added 2006/04/23 12:00 a.m.•37 views

OpenTTD <= 0.4.7 (multiple vulnerabilities) Denial of Service Exploit

Exploit for multiple platform in category dos / poc ===================================================================== OpenTTD = 0.4.7 multiple vulnerabilities Denial of Service Exploit ===================================================================== Luigi Auriemma Application: OpenTTD...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2006/04/21 12:00 a.m.•36 views

Fedora Core 5 : gdm-2.14.1-1.fc5.2 (2006-338)

Notes taken from upstream release mail - The sockets connection between the slaves and the GDM daemon is now better managed to better ensure that sockets are never left open. Brian Cameron - Corrected bug that causes a core dump when you click on gdmgreeter fields that have an id. Brian Cameron -...

3.7CVSS5.5AI score0.00272EPSS
SaveExploits0References2
Rows per page
Query Builder