Chatness <= 2.5.3 (options.php/save.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ====================================================================== Chatness = 2.5.3 options.php/save.php Remote Code Execution Exploit ====================================================================== ?/ Files: options.php, save.p...

chatness253-multi.txt

?/ Files: options.php, save.php Affects: Chatness = 2.5.3 Date: 12th April 2007 Issue Description: =========================================================================== Chatness suffers with two main vulnerabilities, the first of these in /admin/options.php the problems occur because the...

Chatness 2.5.3 - '/options.php/save.php' Remote Code Execution

?/ Files: options.php, save.php Affects: Chatness = 2.5.3 Date: 12th April 2007 Issue Description: =========================================================================== Chatness suffers with two main vulnerabilities, the first of these in /admin/options.php the problems occur because the...

PHP-Stats 0.1.9.1b - 'PHP-stats-options.php' Command Execution

126 $result.=" ."; else $result.=" ".$s...

CVE-2006-5986

admin/options.php in Extreme CMS 0.9, and possibly earlier, does not require authentication, which might allow remote attackers to conduct unauthorized activities. NOTE: this issue can be combined with another vulnerability to expand the scope of a cross-site scripting XSS attack without...

CVE-2006-5985

Extreme CMS 0.9 is affected by multiple XSS vulnerabilities in admin/options.php, exploitable via the parameters bg1, bg2, text, or size. The issue is documented with a CVSS v2 base score of 6.8 (MEDIUM) and indicates remote attackers can inject script/HTML; no exploit details or patches are prov...

CVE-2006-5986: Undefined Security Weakness

admin/options.php in Extreme CMS 0.9, and possibly earlier, does not require authentication, which might allow remote attackers to conduct unauthorized activities. NOTE: this issue can be combined with another vulnerability to expand the scope of a cross-site scripting XSS attack without...

CVE-2006-5985: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in admin/options.php in Extreme CMS 0.9, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 bg1, 2 bg2, 3 text, or 4 size parameters. NOTE: the provenance of this information is unknown; details are...

CVE-2006-5905: Undefined Security Weakness

Web Directory Pro allows remote attackers to 1 backup the database and obtain the backup via a direct request to admin/backupdb.php or 2 modify configuration via a direct request to admin/options.php...

CVE-2005-3740: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the forumid parameter to options.php or 2 lastvisited parameter to viewforum.php...

CVE-2002-1132: Undefined Security Weakness

SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script...

CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via 1 addressbook.php, 2 options.php, 3 search.php, or 4 help.php...

CVE-2002-1131: Undefined Security Weakness

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via 1 addressbook.php, 2 options.php, 3 search.php, or 4 help.php...