1164 matches found
OABoard 1.0 Forum Script Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16105/info The oaBoard application is prone to a remote file-include vulnerability. As a result, remote users may specify external PHP scripts to be included by the application. This could result in the execution of...
TCW PHP Album Multiple Vulnerabilities
No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: TCW PHP Album Multiple Vulnerability Vendor...
Jax PHP Scripts 1.0/1.34/2.14/3.31 logfile.csv User IP Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/14482/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of the...
Netref 4.0 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader :...
SAGU-PRO 1.0 - Multiple Remote File Include Vulnerability
No description provided by source. \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- SAGU-PRO v1.0 Multiple Remote File Include Vulnerability Script: http://gulbf.com.br/?q=node/145 Author: mat Mail: [email protected]...
RIPS <= 0.53 Multiple Local File Inclusion Vulnerabilities
No description provided by source. RIPS = 0.53 Multiple Local File Inclusion Vulnerabilities Google Dork: allintitle: RIPS - A static source code analyser for vulnerabilities in PHP scripts Althout this script is not intended to be accesible from internet, there are some websites that host it...
XAMPP <= 1.7.3 multiple vulnerabilites
No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...
SPGPartenaires 3.0.1 delete.php SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/6455/info Several vulnerabilities have been discovered in SPGPartenaires. The vulnerabilities are due to insufficient sanitization of the 'pass' and 'SPGP' variables used to construct SQL queries in various PHP scripts. B...
Jax PHP Scripts 1.0/1.34/2.14/3.31 formmailer.log User Sent Mail Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/14482/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of the...
Jax PHP Scripts 1.0/1.34/2.14/3.31 ips2block Banned IP List Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/14482/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of the...
Jax PHP Scripts 1.0/1.34/2.14/3.31 jax_linklists.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of the...
MediaWiki 1.3.x Remote Arbitrary Script Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11985/info MediaWiki is reported prone to a vulnerability that can allow a remote attacker to upload arbitrary PHP scripts to a vulnerable server. This issue results from insufficient sanitization of user-supplied input. ...
KnowledgeBuilder 2.0/2.1/3.0 - Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9292/info KnowledgeBuilder is prone to a remote file include vulnerability. An attacker could exploit this to cause hostile PHP scripts to be included and executed from a remote server. This would occur in the security...
Jax PHP Scripts 1.0/1.34/2.14/3.31 archive.php language Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of the...
PostNuke 0.72x Members_List Module Path Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/7218/info Multiple path disclosure vulnerabilities have been reported in various PHP scripts used by PHP-Nuke. The issue occurs when an invalid URI parameter is passed to certain scripts. The affected scripts do not provi...
List of 8,000 FTP Credentials for Sale in Underground Forums
Hackers are targeting FTP upload sites with the hopes of redirecting victims to spam or even infecting webservers that rely on FTP applications for updates. Hold Security reported yesterday it had secured a list of credentials for close to 7,800 FTP sites being circulated in cybercrime forums. Th...
CVE-2013-5013
Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via 1 vectors involving PHP scripts and 2 unspecified other vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the management console on the Symantec Web Gateway SWG appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via 1 vectors involving PHP scripts and 2 unspecified other vectors...
Apache suEXEC - Information Disclosure / Privilege Escalation
Apache suEXEC privilege elevation / information disclosure Discovered by Kingcope/Aug 2013 The suEXEC feature provides Apache users the ability to run CGI and SSI programs under user IDs different from the user ID of the calling web server. Normally, when a CGI or SSI program executes, it runs as...
Symantec Endpoint Protection Management Console RCE Vulnerability
Symantec Endpoint Protection is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...