CVE-2007-3276

Cross-site scripting XSS vulnerability in index.php in Site@School S@S 2.4.10 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3276

CVE-2007-3276 describes a Cross-site Scripting (XSS) vulnerability in Site@School (S@S) 2.4.10, specifically in index.php where the q parameter can be exploited to inject arbitrary script or HTML. The vulnerability is exploitable by remote attackers via the web and is associated with a CVSS v2 ba...

Chi Bo room billing system-free Internet access-vulnerability warning-the black bar safety net

My school electronic reading room available on this system. 搹 犸 欕 a? 曧 l ? 駥 ? Would have been sheer curiosity,in the online search a half a day also no results,had to their own research. Chamber 5 狌 d 倅? ��2?? 鑡? Where method A is theoperating systemof the problem,method, two, three, four is a...

Libstats 1.0.3 - 'template_csv.php' Remote File Inclusion

Libstats 1.0.3 Cyber-warrior.org milw0rm.com 2007-05-18...

IP and MAC bundle cracked-vulnerability warning-the black bar safety net

Our school recently the MAC and IP for the bundle, but also in Server 2K on the Internet time restrictions, really annoying dead, I think I'm the one never subject to the limit of the people Ah, how can like this without a fight! The ancient saying goes,“there policies, under the measures”, then...

Unfixed XSS vulnerability at www.tonbridge-school.co.uk

Security researcher MaXWeL, has submitted on 05/06/2007 a cross-site-scripting XSS vulnerability affecting www.tonbridge-school.co.uk, which at the time of submission ranked 1718410 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/06/2007. It...

P-News v2 (user.txt) Remote Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================= P-News v2 user.txt Remote Password Disclosure Vulnerability ============================================================= P-News V2 - user.txt Information Disclosure Vulnerabili...

P-News 2.0 - 'user.txt' Remote Password Disclosure

P-News V² - user.txt Information Disclosure Vulnerability Critical Level : Dangerous Script Download: http://download.planerd.net/dir/php Bugfounder: Lu7k Contact Me : www.school-of-hack.de or [email protected] -----------------------------------------------------------------------------...

SiteSchool2.4.02.txt

Title: Site@School 2.4.02 and below Multiple remote Command Execution Vulnerabilities Vendor: Site@School webiste : http://siteatschool.sourceforge.net/ Version : Exploit writting by: Simo Ben youssef Discovered: 05 Aout 2006 Published : 15 September 2006 MorX Security Research Team...

CVE-2006-4921

PHP remote file inclusion vulnerability in Site@School S@S 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information...

CVE-2006-4920

Multiple PHP remote file inclusion vulnerabilities in Site@School S@S 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to 1 starnet/modules/snallbum/slideshow.php, and 2 starnet/themes/editable/main.inc.php...

CVE-2006-4922

Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School S@S 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions...

CVE-2006-4920

Multiple PHP remote file inclusion vulnerabilities in Site@School S@S 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to 1 starnet/modules/snallbum/slideshow.php, and 2 starnet/themes/editable/main.inc.php...

CVE-2006-4922

Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School S@S 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions...

CVE-2006-4921

PHP remote file inclusion vulnerability in Site@School S@S 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information...

CVE-2006-4919

Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School S@S 2.4.02 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the dir parameter...

CVE-2006-4921

CVE-2006-4921: PHP remote file inclusion in Site@School (S@S)

CVE-2006-4919

CVE-2006-4919 is a directory traversal vulnerability in Site@School (S@S) 2.4.02 and earlier. The flaw resides in starnet/editors/htmlarea/popups/images.php, where an attacker can read arbitrary files by supplying .. in the dir parameter. The NVD/CVE entries confirm the affected product/module an...

CVE-2006-4922

CVE-2006-4922 describes an unrestricted file upload in Site@School (S@S) 2.4.02 and earlier, specifically in starnet/editors/htmlarea/popups/images.php. The vulnerability enables remote attackers to upload and execute arbitrary files with executable extensions. The available documents identify th...

CVE-2006-4920

CVE-2006-4920 : Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php and (2) starnet/themes/editable/main.inc.php.