90 matches found
Digital Scribe 1.4.1 - Multiple SQL Injections
Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities Name Digital Scribe Vendor http://www.digital-scribe.org Versions Affected 1.4.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X. INDEX I. ABOUT THE...
CVE-2008-0822
Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...
Directory traversal
Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...
CVE-2008-0822
Directory traversal vulnerability in index.php in Scribe 0.2 allows remote attackers to read arbitrary local files via a .. dot dot in the page parameter...
CVE-2008-0822
CVE-2008-0822 affects Scribe 0.2: a directory traversal in index.php via the page parameter (".."), enabling read of arbitrary local files. Root cause is insufficient input validation. Impact is local confidentiality exposure (PARTIAL). CVSS v2 base score 3.6 (LOW) with LOCAL access and no authen...
Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability
No description provided by source. scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 sebug.net...
scribe02-lfi.txt
scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00...
scribe 0.2 local file inclusion vulnerability
scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd00...
Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= Scribe = 0.2 index.php page Local File Inclusion Vulnerability ================================================================= scribe 0.2 local file inclusion vulnerabilit...
Scribe 0.2 - index.php Local File Inclusion
Scribe 0.2 - index.php Local File Inclusion scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...
Scribe 0.2 - 'index.php' Local File Inclusion
scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...
CVE-2007-5823
Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the username parameter in a Register action...
CVE-2007-5822
The CVE-2007-5822 entry affects Ben Ng Scribe 0.2 and earlier, where a flaw in forum.php allows direct static code injection. An attacker can leverage the username parameter in the Register action to cause remote PHP code to be written into a file under regged/. The root cause appears to be impro...
scribe-exec.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Scribe...
Scribe <= 0.2 Remote PHP Code Execution Vulnerability
No description provided by source. --------------------------------------------------------------- Scribe = 0.2 Remote PHP Code Execution Download: http://sourceforge.net/projects/scribe/ --------------------------------------------------------------- By KiNgOfThEwOrLd...
Scribe <= 2.0 Remote PHP Code Execution
--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original Here:...
Scribe 0.2 - PHP Remote Code Execution
Scribe 0.2 - PHP Remote Code Execution --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
Scribe <= 0.2 Remote PHP Code Execution Vulnerability
Exploit for unknown platform in category web applications ===================================================== Scribe | |||| /| / / --------------------------------------------------------------- Scribe YOURPHPCODE" br...
Scribe 0.2 - PHP Remote Code Execution
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Scribe...
Digital Scribe login.php SQL Injection flaw
The remote web server contains a PHP script which is vulnerable to a SQL injection. Description : The remote web server hosts Digital Scribe, a student-teacher set of scripts written in PHP. The version of Digital Scribe installed on the remote host is prone to SQL injection attacks through the...