Mod-Perl Perl-Status Cross Site Scripting

Vulnerability found: 28th February 2009 Vendor informed: 1st March 2009 Advisory last updated: 1st March 2009 Severity: Medium/High Credits: Richard Brain of ProCheckUp Ltd www.procheckup.com CVE reference: CVE-2009-0796 BID: 34383 Many thanks to Torsten Foertsch for his kind assistance in fixing...

DEBIAN-CVE-2009-0796

Cross-site scripting XSS vulnerability in Status.pm in Apache::Status and Apache2::Status in modperl1 and modperl2 for the Apache HTTP Server, when /perl-status is accessible, allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2006-7237

The CVE-2006-7237 entry describes a PHP remote file inclusion vulnerability in Ixprim 2.0, specifically in mod/nc_phpmyadmin/core/libraries/Theme_Manager.class.php. The underlying issue is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code via a URL supplied in an u...

Ubuntu Update for libapache2-mod-python vulnerability USN-430-1

Ubuntu Update for Linux kernel vulnerabilities USN-430-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4301.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libapache2-mod-python vulnerability USN-430-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for libapache2-mod-perl2 vulnerability USN-488-1

Ubuntu Update for Linux kernel vulnerabilities USN-488-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4881.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libapache2-mod-perl2 vulnerability USN-488-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-430-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-488-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP-Fusion Mod Book Panel (bookid) SQL Injection Vulnerability

No description provided by source. /+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\ + + + |----------------------------------------------------------------| + + | PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerabilit...

PHP-Fusion Mod Book Panel (course_id) SQL Injection Vulnerability

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ exploit : http://www.milw0rm.com/exploits/8182 home :...

PHP-Fusion Mod Book Panel (course_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHP-Fusion Mod Book Panel courseid SQL Injection Vulnerability =================================================================...

PHP-Fusion Mod Book Panel - course_id SQL Injection

PHP-Fusion Mod Book Panel - courseid SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ exploit : http://www.milw0rm.com/exploits/8182 home :...

PHP-Fusion Mod Book Panel - 'course_id' SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ exploit : http://www.milw0rm.com/exploits/8182 home : http://www.security-dz.com / soon mirror attack fo...

PHP-Fusion Book Panel Module SQL Injection

/+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\ + + + |----------------------------------------------------------------| + + | PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability | + +...

PHP-Fusion Mod Book Panel (bookid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== PHP-Fusion Mod Book Panel bookid SQL Injection Vulnerability ==============================================================...

PHP-Fusion Mod Book Panel - bookid SQL Injection

PHP-Fusion Mod Book Panel - bookid SQL Injection /+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\ + + + |----------------------------------------------------------------| + + | PHP-Fusion Mod - Book Panel Remote SQL Injectio...

PHP-Fusion Mod Book Panel - 'bookid' SQL Injection

/+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\ + + + |----------------------------------------------------------------| + + | PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability | + +...

MyBB (FWS Mod) reflected XSS

MyBB FWS Mod reflected XSS Mod Name: Forum Warning System http://community.mybboard.net/attachment.php?aid=6814 Vulnerable piece of code: //USERCP AND PM CHANGES elseif$file == "usercp.php" || $file == "private.php" iffunctionexists"imagecreatefrompng" && $mybb-user'fwswarnings' != 0...

phpBB 3 (autopost bot mod <= 0.1.3) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // d...

phpBB 3 - autopost bot mod 0.1.3 Remote File Inclusion

phpBB 3 - autopost bot mod 0.1.3 Remote File Inclusion phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl...

phpBB 3 Remote File Inclusion

phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl // init lastRSS autopost MOD ! // check if we have some feeds in database to check $s...