1169 matches found
CVE-2006-3665
CVE-2006-3665 affects SquirrelMail 1.4.6 and earlier with register_globals enabled. The vulnerability allows remote attackers to hijack cookies via src/redirect.php, with vectors not clearly disclosed in vendor reports. The description notes that “cookie theft” is often linked to XSS, but the ven...
pollxt Mambo Component <= 1.22.07 Remote Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== pollxt Mambo Component = 1.22.07 Remote Include Vulnerability ============================================================== Application : pollxt mambo Component URL :...
CentOS 3 / 4 : php (CESA-2006:0568)
Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...
CVE-2006-3532
Pivot 1.30 RC2 and earlier are affected by a PHP file inclusion vulnerability in includes/edit_new.php when register_globals is enabled. An attacker can supply a FTP URL or full file path in Paths[extensions_path] to execute arbitrary PHP code remotely. The issue enables partial impact to confide...
CVE-2006-3533
Pivot 1.30 RC2 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. When register_globals is enabled, attackers can inject arbitrary web script or HTML via the parameters fg, line1, line2, bg, c1, c2, c3, c4 in includes/blogroll.php; name and js_name in includes/editor...
ottoman-sploit.txt
!/usr/bin/perl use IO::Socket; Jacek Wlodarczyk j4ck - jacekwloatgmaildotcom Title: Ottoman CMS \r\n"; print "- - Victim's target eg: http://www.victim.com\r\n"; print "- - Path to script eg: /ottoman/error.php\r\n"; print "- - eg: http://www.site.com/shdir/\r...
SimpleBoard sbp Parameter Remote File Inclusion
Binary data 3684.prm...
CVE-2006-3520
Sabdrimer Pro 2.2.4 is affected by a PHP remote file inclusion in skins/advanced/advanced1.php when register_globals is enabled. The vulnerability allows an attacker to supply a URL via the pluginpath[0] parameter to execute arbitrary PHP code, as described in CVE-2006-3520. The NVD entry documen...
sabdrimer-include.txt
VIRANGAR SECURITY TEAM Discovered By : A.nosrati www.virangar.org Public www.virangar.net Priv8 Mail: infoatvirangar.net Sabdrimer PRO v.2.2.4 Remote File Include Vulnerability Google Dork : "© Sabdrimer CMS" bug found in file : advanced1.php web Site : http://sabdrimer.ru Remote : Yes Critical...
CVE-2006-3517
PHP remote file inclusion vulnerability in stats.php in RW::Download, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...
Graffiti Forums v1.0 SQL Injection Vulnerabilities
/ -------------------------------------------------------- Neo Security Team NST - Advisory 24 - 08/07/06 -------------------------------------------------------- Program: Graffiti Forums Homepage: http://www.bluedojo.com/ Vulnerable Versions: 1.0. Risk: High! Impact: Critical Risk -==Graffiti...
Mambo phpBB Component download.php phpbb_root_path Parameter Remote File Inclusion
The remote host is running the phpBB component for Mambo, a web-based bulletin board. The version of the phpBB component for Mambo installed on the remote host fails to sanitize input to the 'phpbbrootpath' parameter of the 'download.php' and other scripts before using it to include PHP code...
Sabdrimer PRO (v.2.2.4 ) Remote File Include Vulnerability
VIRANGAR SECURITY TEAM Discovered By : A.nosrati www.virangar.org Public www.virangar.net Priv8 Mail: infoatvirangar.net Sabdrimer PRO v.2.2.4 Remote File Include Vulnerability Google Dork : "© Sabdrimer CMS" bug found in file : advanced1.php web Site : http://sabdrimer.ru Remote : Yes Critical...
Sabdrimer PRO <= 2.2.4 (pluginpath) Remote File Include Vulnerability
No description provided by source. VIRANGAR SECURITY TEAM Discovered By : A.nosrati www.virangar.org Public www.virangar.net Priv8 Mail: infoatvirangar.net Sabdrimer PRO v.2.2.4 Remote File Include Vulnerability Google Dork : "© Sabdrimer CMS" bug found in file : advanced1.php web Site :...
Pivot 1.30 RC2 - Privilege Escalation Remote Code Execution
Pivot 1.30 RC2 - Privilege Escalation Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? echo "Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dorks: "Powered...
CVE-2006-3421
CVE-2006-3162 and CVE-2006-3421 describe PHP remote file inclusion in SmartSiteCMS 1.0 and earlier. The issues affect include/inc_foot.php (CVE-2006-3162) and, per CVE-2006-3421, additional vectors such as comment.php, admin/comedit.php, admin/test.php, admin/index.php, and admin/include/inc_admi...
CVE-2006-3361
The CVE-2006-3361 entry describes a PHP remote file inclusion in Stud.IP 1.3.0-2 and earlier when register_globals is enabled. It allows an attacker to execute arbitrary PHP code via (1) _PHPLIB[libdir] in studip-phplib/oohforms.inc and (2) ABSOLUTE_PATH_STUDIP in studip-htdocs/archiv_assi.php. V...
CVE-2006-3361
PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the 1 PHPLIBlibdir parameter in studip-phplib/oohforms.inc and 2 ABSOLUTEPATHSTUDIP parameter in studip-htdocs/archivassi.php...
[MajorSecurity #19] AutoRank <= 5.01 - Multiple XSS and cookie disclosure
MajorSecurity 19 AutoRank = 5.01 - Multiple XSS and cookie disclosure ------------------------------------------------------------ Software: AutoRank Version: =5.01 Type: Cross site scripting Discovery Date: June, 23th 2006 Made public: July, 2nd 2006 Vendor: JMB SOFTWARE Page:...
CVE-2006-3340
Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via the 1 phpbbrootpath parameter in a includes/functionscms.php and the 2 GlobalSettingstemplatesDirectory parameter i...