CVE-2006-4743

CVE-2006-4743 affects WordPress 2.0.2 through 2.0.5, allowing remote attackers to obtain sensitive information by requesting specific PHP files (e.g., 404.php, akismet.php, archive.php, etc.), which causes error messages that reveal internal paths. The connected documents corroborate the list of ...

CVE-2006-4754

PHProg before 1.1 has a Cross-site Scripting (XSS) flaw in index.php, exploitable via the album parameter used in an opendir call. The same issue can enable full path disclosure with an invalid album value that reveals the installation path in error messages. Affected software: PHProg versions pr...

CVE-2006-4752

The CVE-2006-4752 entry affects Laurentiu Matei’s eXpandable Home Page (XHP) CMS 0.5.1. The vulnerability arises in the engine module where an invalid action parameter allows remote attackers to obtain the installation path. No exploit details or specific versions beyond 0.5.1 are provided in the...

CVE-2006-4754

Cross-site scripting XSS vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that revea...

jetboxCMSSQL.txt

Hello,, Multible Injections in Jetbox CMS Discovered By : HACKERS PAL & mohajali Copy rights : HACKERS PAL & mohajali Website : http://www.soqor.net Email Address : [email protected] This Contains multible injections and vulnerabilities in Jetbox CMS // sql injections if magicquotesgpc = off...

PHProg.txt

------=Part387718013116.1157965429026 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline 11/09/06 Produit vuln=E9rable : PHProg Album photo en PHP Site officiel du produit : http://www.PHProg.com/ Failles de...

PT-2006-5529 · Phprog · Phprog

Name of the Vulnerable Software and Affected Versions: PHProg versions prior to 1.1 Description: The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the album parameter in index.php, which is us...

[Full-disclosure] PHProg : Local File Inclusion + XSS + Full path disclosure

11/09/06 Produit vulnerable : PHProg Album photo en PHP Site officiel du produit : http://www.PHProg.com/ Failles de securite decelees : 1 Full path disclosure : http://localhost/PHProg/?id=1&album=cdg393 2 Cross Site Scripting XSS : http://localhost/PHProg/?id=1&album= scriptalert'cdg393'/script...

CVE-2006-4633

index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or invalid page parameter...

wpSQL.txt

Version Afected: v2.0.5 - v2.0.2 For Version v2.0.2 index.php?paged=-25633&header.php?=-id For Version v2.0.5 index.php?paged=/archive/-1-5-2-Create%20Table PATH DISCLOSOURE /wp-settings.php /wp-admin/admin-footer.php /wp-admin/admin-functions.php /wp-admin/edit-form.php...

softbb01.txt

!/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt Advisory.link.:...

Sql Injection and Path Disclosoure Wordpress v2.0.5

Version Afected: v2.0.5 - v2.0.2 For Version v2.0.2 index.php?paged=-25633&header.php?=-id For Version v2.0.5 index.php?paged=/archive/-1-5-2-Create20Table PATH DISCLOSOURE /wp-settings.php /wp-admin/admin-footer.php /wp-admin/admin-functions.php /wp-admin/edit-form.php...

SoftBB 0.1 (cmd) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================= SoftBB 0.1 cmd Remote Command Execution Exploit ================================================= !/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code...

SoftBB 0.1 (cmd) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt...

SoftBB 0.1 - 'cmd' Remote Command Execution

!/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt Advisory.link.:...

koobi.txt

vendor:http://www.dream4.de dork:"powered by Koobi Pro 5.6" vuln : http://host/index.php?p=showtopic&toid=SQL http://host/index.php?p=showtopic&toid=XSS Path Disclosure:http://host/index.php?area=1&p=' Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran...

OZJournal15.txt

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

Koobi Pro CMS 5.6 SQL injection & XSS

vendor:http://www.dream4.de dork:"powered by Koobi Pro 5.6" vuln : http://host/index.php?p=showtopic&toid=SQL http://host/index.php?p=showtopic&toid=XSS Path Disclosure:http://host/index.php?area=1&p=' Author : Vampire [email protected] Homepage : Www.HackerZ.iR Www.H4ckerZ.Com Iran...

OZJournal v1.5 - XSS

OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...

CVE-2006-3884

Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 offset and 2 limit parameters, 3 newdays parameter in a new action, and the 4 linkid parameter in a deadlink action. NOTE: this issue can also be used...