112 matches found
Net Portal Dynamic System (NPDS) 5.10 Remote Code Execution (2)
No description provided by source. ?php /--------------------------------------------------------- NPDS = 5.10 - Remote Code Execution exploit |Description:| Security holes were found in NPDS 5.10. N掳1: Sql Injection in cookies File Mainfile.php lines 655 to 691. No check is carried out on...
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution (2)
No description provided by source. ?php /---------------------------------------------------------\ NPDS = 5.10 - Remote Code Execution exploit |Description:| Security holes were found in NPDS 5.10. N°1: Sql Injection in cookies File Mainfile.php lines 655 to 691. No check is carried out on...
Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (2)
Net Portal Dynamic System NPDS 5.10 - Remote Code Execution 2 ?php /---------------------------------------------------------\ NPDS = 5.10 - Remote Code Execution exploit |Description:| Security holes were found in NPDS 5.10. N°1: Sql Injection in cookies File Mainfile.php lines 655 to 691. No...
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution (2)
Exploit for unknown platform in category web applications ================================================================== Net Portal Dynamic System NPDS = 5.10 Remote Code Execution 2 ================================================================== ?php...
Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (2)
?php /---------------------------------------------------------\ NPDS = 5.10 - Remote Code Execution exploit |Description:| Security holes were found in NPDS 5.10. N°1: Sql Injection in cookies File Mainfile.php lines 655 to 691. No check is carried out on nicknames or Id which can allow an...
CVE-2007-1634
Variable extraction vulnerability in grabglobals.php in Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the FILESDBtmpname parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation...
CVE-2007-1634
Variable extraction vulnerability in grabglobals.php in Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the FILESDBtmpname parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation...
CVE-2007-1635
CVE-2007-1635 describes a static code injection in Net Portal Dynamic System (NPDS)
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution
No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; Advisory soon if$argc 3 print" TITLE | Net Portal Dynamic System NPDS = 5.10 Remote Code Execution 0day AUTHOR | DarkFig / http://www.acid-root.new.fr / [email protected] NOTE | Works regardless of php settings...
CVE-2006-2950
Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 header.php, 2 contact.php, or 3 forumextender.php, which reveals the path in an error message...
CVE-2006-2950
Net Portal Dynamic System NPDS 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 header.php, 2 contact.php, or 3 forumextender.php, which reveals the path in an error message...
CVE-2006-2950
NPDS 5.10 and earlier is affected. An information-disclosure vulnerability allows remote attackers to obtain sensitive information by directly requesting one of three PHP files (header.php, contact.php, forum_extender.php), causing an error message that reveals file paths. The issue is a disclosu...
CVE-2006-2951
CVE-2006-2951 concerns multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS)
NPDS 5.10 - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/18383/info NPDS is prone to multiple input-validation issues, including information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A successful exploit of...
NPDS 5.10 - Multiple Input Validation Vulnerabilities
NPDS 5.10 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18383/info NPDS is prone to multiple input-validation issues, including information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly...
NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure
// Script Web -------- www.npds.org versions --- NPDS = 5.10 Solutions -- None official Note ------- Vendor has been contacted // Local Inclusion http://.../header.php?DefaultTheme=../apache/logs/error.log00...
[EXPL] Net Portal Dynamic System Denial of Service Exploit
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Net Portal Dynamic System 5.0 - Register Users Denial of Service
Net Portal Dynamic System 5.0 - Register Users Denial of Service !/usr/bin/perl Type|+ Register multiple users for Denial of Service Vendor url|+ www.npds.org Little description|+ NPDS Net Portal Dynamic System is a Frenchand now English ! GNU dynamic portal Solution|+ None official but you can a...
CVE-2002-1804
Cross-site scripting XSS vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag...
CVE-2002-1804
The CVE-2002-1804 entry documents a Cross-site scripting (XSS) vulnerability in NPDS 4.8, allowing remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag. Affected component: NPDS 4.8 frontend rendering of IMG tags; root cause is improper handling/escaping of inline ...