PT-2017-14167

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 3.1.7 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted string. This is demonstrated by a PGP field and is related to prive/objets/contenu/auteur.html and ecrire/inc/texte...

CVE-2008-4718: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the helpfile parameter, a different vector than CVE-2006-2156...

x7chat201-lfi.txt

------------------------------------------------------------------------- -- JIKI Team JIKO + KIl1er + merwan-neo --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com Script : X7 Chat Version 2.0.1 Bug :...

X7 Chat 2.0.1A1 - mini.php Local File Inclusion

X7 Chat 2.0.1A1 - mini.php Local File Inclusion ==================================================================== o X7 Chat = 2.0.1A1 Local File Inclusion Vulnerability Software : X7 Chat version 2.0.5.1 Vendor : http://x7chat.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom...

X7 Chat <= 2.0.1A1 (mini.php help_file) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================================== X7 Chat = 2.0.1A1 mini.php helpfile Local File Inclusion Vulnerability ==========================================================================...

X7 Chat 2.0.1A1 - Local File Inclusion

X7 Chat 2.0.1A1 - Local File Inclusion ------------------------------------------------------------------------- -- JIKI Team JIKO + KIl1er + merwan-neo --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Co...

CVE-2006-3327

The CVE-2006-3327 entry describes a Cross-site scripting (XSS) vulnerability in the Custom dating biz dating script 1.0. The affected components are profile/mini.php (sn20_special_cases parameter, “Special Cases”), profile/photo_create.php (tyxx01_album_name parameter, “Album Name”), and admin/us...

CVE-2006-3327: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Custom dating biz dating script 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 sn20specialcases parameter "Special Cases" field in profile/mini.php, 2 tyxx01albumname parameter "Album Name" field in profile/photocreate.php, a...