Milliscript 1.4 Multiple Vulnerabilities

Full PDF Advisory: http://securitynation.com/files/sndown.php?id=22 english http://securitynation.com/files/sndown.php?id=22 spanish Multiple Bugs On MilliScripts 1.4 Redirection http://www.milliscripts.at Date: 01-Diciembre-2005 Researchers: Luis Alberto Cortes Zavala, Vicente Perez 1.-Overview...

Utopia News Pro 1.1.3 - 'news.php' SQL Injection

SQL INJECTION: /str0ke 3.10 07/10/2005 utopiaxpl.php Utopia News Pro 1.1.3 possibly prior versions SQL Injection / Administrative credentials disclosure by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = ...

CVE-2005-2894: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field...

CMS Made Simple <= 0.10 - PHP injection

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: CMS Made Simple - PHP injection Version = 0.10 Homepage: http://www.cmsmadesimple.org/ Author: Filip Groszynski VXSfx Date: 31 August 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Background: CMS Made Simple is an easy...

CMS010.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: CMS Made Simple - PHP injection Version -------------------------------------------------------- Exploit: example.html: inpu...

phptbInject.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHPTB Topic Board - Multiple PHP injection vulnerabilities Version = 2.0 Homepage: htt://www.phptb.com/ Author: Filip Groszyñski VXSfx Date: 17 August 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Background: PHPTB Top...

PHPTB Topic Board <= 20: Multiple PHP injection vulnerabilities

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHPTB Topic Board - Multiple PHP injection vulnerabilities Version = 2.0 Homepage: htt://www.phptb.com/ Author: Filip Groszyсski VXSfx Date: 17 August 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Background: PHPTB Top...

Drupal <= 4.5.3 & <= 4.6.1 Comments PHP Injection Exploit

No description provided by source. !/usr/bin/perl Mon Jul 4 18:19:35 CEST 2005 [email protected] DRUPAL-SA-2005-002 php injection in comments yes, its lame Hax0r code here, read before execute Run without arguments to show the help. BLINK! BLINK! BLINK! BLINK! Feel free to port to another stupid...

Drupal 4.5.3 4.6.1 - Comments PHP Injection

Drupal 4.5.3 4.6.1 - Comments PHP Injection !/usr/bin/perl Mon Jul 4 18:19:35 CEST 2005 [email protected] DRUPAL-SA-2005-002 php injection in comments yes, its lame Hax0r code here, read before execute Run without arguments to show the help. BLINK! BLINK! BLINK! BLINK! Feel free to port to anoth...

CVE-2004-2138: Undefined Security Weakness

Cross-site scripting XSS vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject arbitrary HTML and PHP code via the 1 Name, 2 Email, 3 Homepage or 4 Comments field...

Php инъекция в Form Mail Script

SVadvisory8 Title: Php инъекция в Form Mail Script Программа: Form Mail Script Уязвимая версия: = 2.0.4 Homepage: http://www.stadtaus.com/en/phpscripts/formmailscript/ Найдена уязвимость: 27.06.05 Нашел: patr0n / SVT / www.svt.nukleon.us...

PHP Injection in PHP Poll Creator

svadvisory6 -------------------------------------------------------------+ Title: PHP Injection in PHP Poll Creator | Software: PHP Poll Creator v 1.01 | Homepage: http://www.phppc.de +------------+ Finder: rash | 24.05.05 | -------------------------------------------------------------+ Descripti...

CVE-2003-1180

CVE-2003-1180 describes a directory traversal vulnerability in Advanced Poll 2.0.2 . The issue allows remote attackers to read arbitrary files or inject arbitrary local PHP files by using “..” sequences in the parameters base_path or pollvars[lang] when accessing admin scripts (1) index.php, (2) ...

CVE-2003-1180: Undefined Security Weakness

Directory traversal vulnerability in Advanced Poll 2.0.2 allows remote attackers to read arbitrary files or inject arbitrary local PHP files via .. sequences in the basepath or pollvarslang parameters to the admin files 1 index.php, 2 admintplnew.php, 3 admintplmiscnew.php, 4...

CVE-2005-0647: Undefined Security Weakness

adminsetup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the 1 $formcomments or 2 $formautoapprove parameters, which are written to config.php...

paNews_v2.0b4.txt

oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: paNews v2.0b4 Bug found by: ò¸ìû÷ Date: 20.02.2005 web: http://www.phparena.net/panews.php google: allintitle:paNews v2.0b4 PHP...

vBulletin < 3.0.7 misc.php PHP Code Injection

Binary data 2642.prm...

paNews v2.0b4 - PHP Injection

oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: paNews v2.0b4 Bug found by: тёмыч Date: 20.02.2005 web: http://www.phparena.net/panews.php google: allintitle:paNews v2.0b4 PHP...

[PersianHacker.NET 200502-05] WWWoard passwd

Persianhacker.net Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final WWWBoard is a threaded World Wide Web discussion forum and message board, which allows users to post new messages, followup to existing ones and more. The current release in 2.0 ALPHA 2.1, which means there still are a...

[PersianHacker.net] Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final

In the name of GOD Persianhacker.net Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final PafileDB paFileDB is designed to allow webmasters have a database of files for download on their site. To add a download, all you do is upload the file using FTP or whatever method you use, log into...