CVE-2009-4382

Cross-site scripting XSS vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inject arbitrary web script or HTML via the mod parameter...

CVE-2009-4382

CVE-2009-4382 affects phpFaber CMS, likely in module.php, where user-supplied mod parameter enables cross-site scripting (XSS). Public records indicate PHPFaber CMS 1.3.36 is vulnerable; root cause is insufficient sanitization of input, allowing arbitrary script/HTML injection. The vulnerability ...

phpFaber CMS Cross Site Scripting

/\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + phpFaber CMS XSS Vulnerability // Author Info x Author: bi0 x Contact: [email protected] x Homepage : www.ssteam.ws x Thanks:...

phpFaber CMS - XSS Vulnerability

No description provided by source. Title: phpFaber CMS - XSS Vulnerability Date: 14/12/2009 Author: bi0 Software Link: http://www.phpfaber.com/products/cms CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...

phpFaber CMS 1.3.36 - module.php Cross-Site Scripting

phpFaber CMS 1.3.36 - module.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37329/info phpFaber CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...

phpFaber CMS 1.3.36 - 'module.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37329/info phpFaber CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Unfixed XSS vulnerability at demo.phpfaber.com

Security researcher Darkc0ke, has submitted on 05/05/2009 a cross-site-scripting XSS vulnerability affecting demo.phpfaber.com, which at the time of submission ranked 1121530 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

phpFaber URLInn Config.PHP远程文件包含漏洞

phpFaber URLInn是一款基于PHP的WEB应用程序。 phpFaber URLInn不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Config.PHP'脚本对用户提交的'dirws'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 phpFaber URLInn 2.0.5 目前没有详细解决方案提供： http://www.phpfaber.com/i/products/urlinn/...

CVE-2007-5754

CVE-2007-5754 affects phpFaber URLInn 2.0.5, where a PHP remote file inclusion vulnerability exists in urlinn_includes/config.php. The issue allows an attacker to supply a URL to the dir_ws parameter to execute arbitrary PHP code on the server. This is evidenced by references to exploit-DB and vu...

phpfaber-rfi.txt

/ \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /' ---------------------------------------------- GrEeTs...

phpFaber URLInn 2.0.5 (dir_ws) Remote File Inclusion Vulnerability

No description provided by source. / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ &...

phpFaber URLInn 2.0.5 (dir_ws) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== phpFaber URLInn 2.0.5 dirws Remote File Inclusion Vulnerability ================================================================== / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ |...

phpFaber URLInn 2.0.5 - dir_ws Remote File Inclusion

phpFaber URLInn 2.0.5 - dirws Remote File Inclusion / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /'...

Directory traversal

Directory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote attackers to read arbitrary files via a .. dot dot in the modify parameter in a template action to admin/index.php...

CVE-2007-2155

CVE-2007-2155 affects phpFaber TopSites 3. A directory traversal vulnerability in template.php (modify parameter in a template action to admin/index.php) allows remote attackers to read arbitrary files via .. traversal. This is a network-accessible issue with low attack complexity and no authenti...

phpfaber-include.txt

phpFaber TopSites v.3index.phpRemote File Disclosure Vulnerability D.Script: http://www.phpfaber.com/cmscontent/files/phpfabertopsites.zip Discovered by: Dr.RoVeR --Arab48 Hacker [email protected] Greetz To: Tryag Team You have to be admin to run the script :D V.Code: if !$GET'page' ||...

nEw Bug :D

phpFaber TopSites v.3index.phpRemote File Disclosure Vulnerability D.Script: http://www.phpfaber.com/cmscontent/files/phpfabertopsites.zip Discovered by: Dr.RoVeR --Arab48 Hacker [email protected] Greetz To: Tryag Team You have to be admin to run the script :D V.Code: if !$GET'page' ||...

PHPFaber TopSites 3 - adminindex.php Directory Traversal

PHPFaber TopSites 3 - adminindex.php Directory Traversal source: https://www.securityfocus.com/bid/23419/info TopSites is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files...

PHPFaber TopSites 3 - 'admin/index.php' Directory Traversal

source: https://www.securityfocus.com/bid/23419/info TopSites is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserve...

CVE-2006-5626

Cross-site scripting XSS vulnerability in cmsimages/js/htmlarea/htmlarea.php in phpFaber Content Management System CMS before 1.3.36 on 20061026 allows remote attackers to inject arbitrary web script or HTML, probably via arbitrary parameters in the query string, as demonstrated with a vigilon...