OvBB 0.16a - Multiple Local File Inclusions

OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by cOndemned Tested on Linux Debian apache + php5 + mysql download at http://sourceforge.net/projects/ovbb/ source of /skins/default/addevent.tpl.php 1. ?php 2. // Header. 3. $strPageTitle = " :: Calendar :. New$strType Event"; 4...

Ubuntu: Security Advisory (USN-989-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for php5 vulnerabilities USN-989-1

Ubuntu Update for Linux kernel vulnerabilities USN-989-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9891.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for php5 vulnerabilities USN-989-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : php5 vulnerabilities (USN-989-1)

Auke van Slooten discovered that PHP incorrectly handled certain xmlrpc requests. An attacker could exploit this issue to cause the PHP server to crash, resulting in a denial of service. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 9.04 and 9.10. CVE-2010-0397 It was discovered that the...

ecshop advertising call page message header is written into the storms path-vulnerability warning-the black bar safety net

/affiche.php,php5 environmental error exposure program path, php4 environment to display the written information the charset parameter is not to do rigorous filtration result in an http message header truncated written...

Joomla! Component com_mtree 2.1.5 - Arbitrary File Upload

Joomla! Component commtree 2.1.5 - Arbitrary File Upload Exploit Title: Joomla Component Mosets Tree 2.1.5 Shell Upload Vulnerability Date: 6 September 2010 Author: jdc Software Link: http://www.mosets.com/tree/ Version: 2.1.5 Patched: 2.1.6 Tested on: PHP5, MySQL5 Mosets Tree suffers from a shel...

Traidnt Upload 2.0 [.php3] Extension Remote Shell Upload

Exploit for php platform in category web applications ======================================================== Traidnt Upload 2.0 .php3 Extension Remote Shell Upload ======================================================== . . \ / / | \ | | \ | / / \ / / \ | | \ \ | \ / / / / / / / / / / /...

DSA-2089-1 php5 - several vulnerabilities

Bulletin has no description...

Joomla! Component Minify4Joomla! - Arbitrary File Upload / Persistent Cross-Site Scripting

======================================================= Minify4Joomla Upload and Persistent XSS Vulnerability ======================================================= Name : Minify4Joomla Upload and Persistent XSS Vulnerability Date : july 9,2010 Critical Level : HIGH vendor URL...

Joomla! Component Minify4Joomla - Arbitrary File Upload Persistent Cross-Site Scripting

Joomla! Component Minify4Joomla - Arbitrary File Upload Persistent Cross-Site Scripting ======================================================= Minify4Joomla Upload and Persistent XSS Vulnerability ======================================================= Name : Minify4Joomla Upload and Persistent...

Minify4Joomla Upload and Persistent XSS Vulnerability

Exploit for php platform in category web applications ===================================================== Minify4Joomla Upload and Persistent XSS Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

AujamSoft Cards/Gallery Cross Site Scripting

Exploit Title: AujamSoft Cards/gallery XSS Date: June:20:2010 as my laptop Date! Author: Str1k3r Tested on: PHP5 Version: There only One Version exploit: www.site.com/cards/?p=all&id=19" www.site.com/gallery/item.php?id=1&catp=1" The New Busy is not the too busy. Combine all your e-mail accounts...

Joomla Gallery XML 1.1 Local File Inclusion / SQL Injection

Exploit Title: Joomla Component Gallery XML 1.1 Multiple Vulnerabilities Date: 18 May 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/12504 Version: 1.1 Tested on: PHP5, MySQL5 Local File Include ------------------...

Joomla JFaq 1.2 SQL Injection / Cross Site Scripting

Exploit Title: Joomla Component JFaq 1.2 Multiple Vulnerabilities Date: 11 May 2010 Author: jdc Version: 1.2 Tested on: PHP5, MySQL5 "title" input SQL injection --------------------------- title', select concatusername,char32,password from users where gid=25 limit 1, 1, 1, 1, 1, 1 -- ' id SQL...

Joomla Ozio Gallery 2 Mail Relay

Ozio Gallery 2 v 2.4 Open Mail Relay: To: From: Subject: Message: Directory Traversal: path:...

Joomla! Component RSComments 1.0.0 - Persistent Cross-Site Scripting

Joomla! Component RSComments 1.0.0 - Persistent Cross-Site Scripting Exploit Title: Joomla Component RSComments 1.0.0 Multiple XSS Vulnerabilities Date: 18 May 2010 Author: jdc Software Link: http://www.rsjoomla.com Version: 1.0.0 Tested on: PHP5, MySQL5 Name Field Persistent XSS...

Joomla Listbingo 1.3 SQL Injection / Cross Site Scripting

Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities Date: 09 June 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062 Version: 1.3 Tested on: PHP5, MySQL5 SQL Injection ------------- ?q=11111 &catid=0 &searchfromprice=99...

Joomla Component com_oziogallery2 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================================== Joomla Component comoziogallery2 Multiple Vulnerabilities ========================================================== Ozio Gallery 2 v 2.4 Open Mail Relay: To: From: Subject: Message:...

Joomla Component com_galleryxml Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================================== Joomla Component comgalleryxml Multiple Vulnerabilities ======================================================== Exploit Title: Joomla Component Gallery XML 1.1 Multiple Vulnerabilities...

Joomla! Component Answers 2.3beta - Multiple Vulnerabilities

Joomla! Component Answers 2.3beta - Multiple Vulnerabilities Exploit Title: Joomla Component Answers v2.3beta Multiple Vulnerabilities Date: 25 May 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/communication/forum/12652 Version: 2.3beta Tested on: PHP5, MySQL5 Blind SQL...