FreeBSD : drupal -- XSS (register_globals) (f0fa19dd-c060-11dc-982e-001372fd0af2)

The Drupal Project reports : When theme .tpl.php files are accessible via the web and the PHP setting registerglobals is set to enabled, anonymous users are able to execute cross site scripting attacks via specially crafted links. Drupal's .htaccess attempts to set registerglobals to disabled and...

Member Area System (MAS) Remote File Include Vulnerability (view_func.php)

---------------------------------------------------------------------- Member Area System MAS Remote File Include Vulnerability viewfunc.php ---------------------------------------------------------------------- Author: ShipNX shipnx AT yahoo com Impact: Remote file include Status: Patch not...

mas-rfi.txt

---------------------------------------------------------------------- Member Area System MAS Remote File Include Vulnerability viewfunc.php ---------------------------------------------------------------------- Author: ShipNX Impact: Remote file include Status: Patch not available...

CVE-2007-5761

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...

CVE-2007-5761

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...

RunCMS Multiple Script lid Parameter SQL Injection

The version of this software installed on the remote host fails to sanitize user-supplied input to the 'lid' parameter of the 'modules/mydownloads/visit.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' and 'registerglobals' settings, an attacker may be able to...

sinecms-lfiexec.txt

| | | / | |\ \ / | / |/ | | | | |/ \ | | | |||| | | /| / / | | Sine CMS Local File Inclusion / RCE Registerglobals: ON | | Version: PoC: Usually, this is a correctly code, with no possible exploitation. But if registerglobals is ON, we...

Loudblog loudblog/inc/parse_old.php template Parameter Arbitrary Remote Code Execution

The remote host is running Loudblog, a PHP application for publishing podcasts and similar media files. The version of Loudblog on the remote host fails to sanitize input to the 'template' parameter of the 'loudblog/inc/parseold.php' script before using it in an 'eval' statement to evaluate PHP...

SineCMS 2.3.5 - Local File Inclusion Remote Code Execution

SineCMS 2.3.5 - Local File Inclusion Remote Code Execution | | | / | |\ \ / | / |/ | | | | |/ \ | | | |||| | | /| / / | | Sine CMS Local File Inclusion / RCE Registerglobals: ON | | Version: = 2.3.5 | | Vendor: www.sinecms.net | | Discovered by: KiNgOfThEwOrLd | Intro: Sine cms is affected by a...

Cross-Site Scripting vulnerabilities in AwesomeTemplateEngine

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в AwesomeTemplateEngine. XSS: http://site/templates/exampletemplate.php?datatitle=3C/title3E3Cscript3Ealertdocument.cookie3C/script3E...

SuSE 10 Security Update : xen (ZYPP Patch Number 4766)

This update fixes various Xen issues. Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints. - Xen 3.1.1 does not prevent modification of the CR4 TSC from...

[Full-disclosure] IBM Domino Web Access Upload Control dwa7w.dll Memory Corruption

The Domino Web Access Upload Module version 7.0.34.1 seems to suffer from a memory corruption issue that may allow the execution of arbitrary code. By setting the GeneralServerName property and calling the InstallBrowserHelperDll function it MAY be possible to control the ECX register and thereby...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Bitweaver 2.0.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 users/register.php or 2 search/index.php, or an editcomments action in 3 wiki/index.php or 4 forums/index.php. NOTE: the error...

Oreon 1.4 / Centreon 1.4.1 Multiple RFI Vulnerabilties

No description provided by source. By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file is:...

123tkShop 0.9.1 - Remote Authentication Bypass

123tkShop 0.9.1 - Remote Authentication Bypass By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...

Oreon 1.4 Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities

Oreon 1.4 Centreon 1.4.1 - Multiple Remote File Inclusion Vulnerabilities By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file...

123tkShop 0.9.1 - Remote Authentication Bypass

By Michael Brooks Vulnerability:Sql Injection Software:123tkShop Homepage:http://sourceforge.net/projects/my123tkshop/ Affects Version 0.9.1. An attacker can gain Administrative rights with this authentication bypass exploit:...

123tkShop 0.9.1 Remote Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ========================================================== 123tkShop 0.9.1 Remote Authentication Bypass Vulnerability ========================================================== By Michael Brooks Vulnerability:Sql Injection Software:123tkSh...

[Full-disclosure] two bytehoard bugs

Application: Bytehoard Versions: 2.1 alpha to epsilon Release Date: 2007-11-26 Author: Ernesto Alvarez / Activesec SA Kudos to: Rodrigo Seguel / Activesec SA for suggesting the session destruction approach Contact info: ealvarez at activesec biz Developer response: None. No response to mail, foru...

EHCP 0.22.8 - Multiple Remote File Inclusions

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...