RSS-aggregator 1.0 - IdTag SQL Injection

RSS-aggregator 1.0 - IdTag SQL Injection source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit...

RSS-aggregator 1.0 - Authentication Bypass

source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database,...

RSS-aggregator 1.0 - 'IdTag' SQL Injection

source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database,...

Remote file inclusion

PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2884

PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2884

The vulnerability CVE-2008-2884 affects the RSS-aggregator component, specifically display.php, where a PHP remote file inclusion is possible. An attacker can supply a URL in the path parameter to cause the application to include and execute remote PHP code on the server. Root cause: PHP remote f...

RSS-aggregator (display) Remote File Inclusion Vulnerability

RSS-aggregator display Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM HOME : www.Real-Hack.net Email : [email protected] Script : RSS-aggregator Download Script : http://www.rss-aggregator.com/download.php =========================== Viva IslaM ==========================...

RSS-Aggregator (display.php path) Remote File Inclusion Vulnerability

No description provided by source. RSS-aggregator display Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM HOME : www.Real-Hack.net Email : [email protected] Script : RSS-aggregator Download Script : http://www.rss-aggregator.com/download.php =========================== Viva...

rssaggregator-rfi.txt

RSS-aggregator display Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM HOME : www.Real-Hack.net Email : [email protected] Script : RSS-aggregator Download Script : http://www.rss-aggregator.com/download.php =========================== Viva IslaM ==========================...

RSS-Aggregator (display.php path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== RSS-Aggregator display.php path Remote File Inclusion Vulnerability ===================================================================== RSS-aggregator display Remote...

RSS-aggregator - path Remote File Inclusion

RSS-aggregator - path Remote File Inclusion RSS-aggregator display Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM HOME : www.Real-Hack.net Email : [email protected] Script : RSS-aggregator Download Script : http://www.rss-aggregator.com/download.php...

RSS-aggregator - 'path' Remote File Inclusion

RSS-aggregator display Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM HOME : www.Real-Hack.net Email : [email protected] Script : RSS-aggregator Download Script : http://www.rss-aggregator.com/download.php =========================== Viva IslaM ==========================...

Debian Security Advisory DSA 1477-1 (yarssr)

The remote host is missing an update to yarssr announced via advisory DSA 1477-1. OpenVAS Vulnerability Test $Id: deb14771.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1477-1 yarssr Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1477-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2008 http://www.debian.org/security/faq -...

Debian DSA-1477-1 : yarssr - missing input sanitising

Duncan Gilmore discovered that yarssr, an RSS aggregator and reader, performs insufficient input sanitising, which could result in the execution of arbitrary shell commands if a malformed feed is read. Due to a technical limitation of the archive management scripts, the fix for the old stable...

[SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1477-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 27, 2008 http://www.debian.org/security/faq -...

Gregarius 0.5.2 XSS and SQL Injection Vulnerabilities

http://gregarius.net/ Gregarius is a web-based RSS/RDF/ATOM feed aggregator, designed to run on your web server, allowing you to access your news sources from wherever you want. XSS in search.php: search.php?rssquery=scriptalert1/script&rssquerymatch=exact XSS in tags.php:...