VWar 1.50 R14 - online.php SQL Injection

VWar 1.50 R14 - online.php SQL Injection .: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | \\ /\ / :. . ..: ||| / \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: 1o.o8.2oo6 .. Affected Application: VWar query" line 64: SELECT memberid,...

CVE-2006-3365: Exposure of Sensitive Information to an Unauthorized Actor

V3 Chat allows remote attackers to obtain the installation path via 1 an invalid id parameter to mail/index.php or 2 membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement...

Path traversal

Jupiter CMS 1.1.5, when displayerrors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php...

CVE-2006-1679

CVE-2006-1679 is an XSS flaw in Jupiter CMS 1.1.5. The vulnerability is in modules/online.php and is exploitable via the layout parameter to index.php, allowing remote attackers to inject arbitrary web script or HTML. No remediation or patch details are provided in the connected documents.

CVE-2006-1680: Undefined Security Weakness

Jupiter CMS 1.1.5, when displayerrors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php...

CVE-2006-1679: Undefined Security Weakness

Cross-site scripting XSS vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php...

arabportalXSS.txt

ArabPortal 2.0 Stable .. The Best Arbian Portal & Forums System The Bug Is XSS code online.php?&title=D3vil-0x1CODE download.php?action=byuser&userid=1&title=D3vil-0x1CODE /code center ^^ Secumod 0.1 Anti-XSS & SQL Injection ^^ Get It For Free !! Only 15$ And Update it forever Connect Me By E-Mai...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0 aka Arab Dynamic Portal or ADP stable allow remote attackers to inject arbitrary web script or HTML via the title parameter in 1 online.php and 2 download.php...

CVE-2006-1504

CVE-2006-1504 concerns multiple XSS vulnerabilities in Arab Portal 2.0 (also called Arab Dynamic Portal/ADP). The issues allow remote attackers to inject arbitrary web script or HTML by manipulating the title parameter in two pages: online.php and download.php. The affected software is Arab Porta...

CVE-2006-1504: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0 aka Arab Dynamic Portal or ADP stable allow remote attackers to inject arbitrary web script or HTML via the title parameter in 1 online.php and 2 download.php...

ArabPortal 2.0 Stable CrossSiteScripting

ArabPortal 2.0 Stable .. The Best Arbian Portal & Forums System The Bug Is XSS code online.php?&title=D3vil-0x1/titleXSSCODE/XSS download.php?action=byuser&userid=1&title=D3vil-0x1/titleXSSCODE/XSS /code center ^^ Secumod 0.1 Anti-XSS & SQL Injection ^^ Get It For Free !! Only 15$ And Update it...

Arab Portal 2.0 - online.php Cross-Site Scripting

Arab Portal 2.0 - online.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17285/info ArabPortal System is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issu...

CVE-2004-2509

Infopop UBB.Threads exposes XSS in multiple pages. Affected versions include 6.2.3 and 6.5, with vulnerable scripts calendar.php, login.php, and online.php. The underlying issue is cross-site scripting via the Cat parameter, enabling remote attackers to inject arbitrary script/HTML into a user’s ...

CVE-2005-1833: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to calendar.php, 2 idsql parameter to online.php, 3 usersearch parameter to memberlist.php, 4 pid parameter to editpost.php, 5 fid parameter to...

CVE-2005-1833

Multiple SQL injection vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to calendar.php, 2 idsql parameter to online.php, 3 usersearch parameter to memberlist.php, 4 pid parameter to editpost.php, 5 fid parameter to...