22 matches found
EUVD-2006-1168
Malware in sbrugna...
EUVD-2006-1167
Malware in sbrugna...
EUVD-2006-1166
Malware in sbrugna...
nodez <= 4.6.1.1 mercury Multiple Vulnerabilities
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; / software: site: nodez.greentinted.com/ description:...
nodez 4.6.1.1 mercury - Multiple Vulnerabilities
!/usr/bin/php -q -d shortopentag=on ? echo "Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; / software: site: nodez.greentinted.com/ description: Nodez - "An open source conten...
Nodez <= 4.6.1.1 Mercury Multiple Remote Vulnerabilities
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; / software: site: nodez.greentinted.com/...
Nodez <= 4.6.1.1 Mercury Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== Nodez = 4.6.1.1 Mercury Multiple Remote Vulnerabilities ======================================================== !/usr/bin/php -q -d shortopentag=on ? echo "Nodez 4.6.1.1 Mercury...
nodez 4.6.1.1 mercury - Multiple Vulnerabilities
nodez 4.6.1.1 mercury - Multiple Vulnerabilities !/usr/bin/php -q -d shortopentag=on ? echo "Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; / software: site:...
Directory traversal
Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP files via a .. dot dot in the op parameter, as demonstrated by inserting malicious Email parameters into list.gtdat, then accessing list.gtdat using the op parameter...
CVE-2006-1164
Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing list.gtdat...
Improper access control
Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing list.gtdat...
Cross site scripting
Cross-site scripting XSS vulnerability in Nodez 4.6.1.1 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: it is possible that this issue is resultant from the directory traversal vulnerability...
CVE-2006-1162
Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP files via a .. dot dot in the op parameter, as demonstrated by inserting malicious Email parameters into list.gtdat, then accessing list.gtdat using the op parameter...
CVE-2006-1163
Cross-site scripting XSS vulnerability in Nodez 4.6.1.1 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: it is possible that this issue is resultant from the directory traversal vulnerability...
CVE-2006-1164
Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing list.gtdat...
CVE-2006-1162
Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP files via a .. dot dot in the op parameter, as demonstrated by inserting malicious Email parameters into list.gtdat, then accessing list.gtdat using the op parameter...
CVE-2006-1163
The CVE-2006-1163 entry concerns Nodez 4.6.1.1, affected by a Cross‑Site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via the op parameter. The vulnerability may originate from a directory traversal issue, as noted in the description. Documents do not...
CVE-2006-1162
CVE-2006-1162 : A directory traversal in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP files via a .. in the op parameter, demonstrated by inserting malicious Email parameters into list.gtdat and accessing it with op. Root cause is improper path handling enabl...
CVE-2006-1164
CVE-2006-1164 affects Nodez 4.6.1.1 and earlier. The vulnerability arises from storing sensitive data in the web document root in the file list.gtdat with insufficient access control, permitting remote attackers to directly access the file and obtain usernames and password hashes. This is a discl...
CVE-2006-1163
Cross-site scripting XSS vulnerability in Nodez 4.6.1.1 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: it is possible that this issue is resultant from the directory traversal vulnerability...