EUVD-2008-4870

Malware in sbrugna...

EUVD-2008-4878

Malware in sbrugna...

EUVD-2008-4871

Malware in sbrugna...

CVE-2008-4899

Cross-site request forgery CSRF vulnerability in Planetluc RateMe 1.3.3 allows remote attackers to perform unauthorized actions as other users via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Planetluc RateMe 1.3.3 allows remote attackers to perform unauthorized actions as other users via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the rate parameter in a submit rate action...

Cross site scripting

Cross-site scripting XSS vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via the mghash parameter. NOTE: some of these details are obtained from third party...

CVE-2008-4891

CVE-2008-4891 affects Planetluc SignMe 1.5 before 1.55. The vulnerability is a cross-site scripting (XSS) flaw in signme.inc.php that allows an attacker to inject arbitrary script or HTML via the hash parameter. Per NVD, the CVSS v2 base score is 4.3 (Medium) with network attack vector, no authen...

CVE-2008-4898

CVE-2008-4898 describes an XSS vulnerability in planetluc RateMe 1.3.3 where an attacker can inject arbitrary web script or HTML by supplying a crafted rate parameter in a submit rate action. The affected software is planetluc RateMe 1.3.3; input handling in the rate parameter is the root cause. ...

CVE-2008-4899

Cross-site request forgery CSRF vulnerability in Planetluc RateMe 1.3.3 allows remote attackers to perform unauthorized actions as other users via unspecified vectors...

CVE-2008-4899

CVE-2008-4899 describes a cross-site request forgery in Planetluc RateMe 1.3.3 . The vulnerability allows remote attackers to perform unauthorized actions as other users via unspecified vectors. The available sources confirm the affected product and vulnerability class but do not specify the exac...

CVE-2008-4892

CVE-2008-4892 affects Planetluc MyGallery 1.7.2 and earlier (likely all versions before 1.8.1). The vulnerability is a Cross‑Site Scripting (XSS) in gallery.inc.php that allows remote attackers to inject arbitrary web script or HTML via the mghash parameter. Impact is an in‑context script injecti...

rateme-rfi.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,, ff;;;;...

CVE-2006-6648

CVE-2006-6648 affects planetluc.com RateMe 1.3.2 and earlier. A PHP remote file inclusion vulnerability exists in main.inc.php, enabling remote attackers to execute arbitrary PHP code via a URL in the pathtoscript parameter. Exploitation status is not provided in the supplied documents, and no re...

RateMe <= 1.3.2 (main.inc.php) Remote File Include Vulnerability

No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ...,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;::...

RateMe <= 1.3.2 (main.inc.php) Remote File Include Vulnerability

No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ...,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;::...

RateMe <= all versions => ( main.inc.php ) Remote File Include Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ...,,:: ;;ii,,:: + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,, ff;;;;i...

RateMe 1.3.2 - 'main.inc.php' Remote File Inclusion

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ...,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,,...