SineCMS

. . . . | . .| . .;/ || .| .net | .| "SineCms Version 2.3.4 - Non-Persistent XSS Vulnerability" by Nexus 1 Infos --------- Date : 2007-04-26 ISO 8601 Product : SineCms Version : 2.3.4 last, prior versions may also be affected Vendor : http://sourceforge.net/projects/sine - http://www.sinecms.net...

Unfixed XSS vulnerability at uk.searchengine.com

Security researcher zuppergazi, has submitted on 17/03/2007 a cross-site-scripting XSS vulnerability affecting uk.searchengine.com, which at the time of submission ranked 89261 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/03/2007. It is...

Secure site - Access bypass

Secure site allows one to protect a website with a browser-based password. These usernames and passwords are tied directly to the Drupal user database. The site will be invisible to search engines and other crawlers, but still allows access to certain users. A serious design flaw allows the acces...

PPC Search Engine INC远程文件包含漏洞

PPC Search Engine是一款基于PHP的WEB应用程序。 PPC Search Engine不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'INC'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 PPC Search Engine 1.61 目前没有解决方案提供： http://www.hyper-scripts.com/demo/ppc...

CVE-2007-0167

Multiple PHP file inclusion vulnerabilities in WGS-PPC aka PPC Search Engine, as distributed with other aliases, allow remote attackers to execute arbitrary PHP code via a URL in the INC parameter in 1 configadmin.php, 2 configmain.php, 3 configmember.php, and 4 mysqlconfig.php in config/; 5...

CVE-2007-0167

CVE-2007-0167 concerns the WGS-PPC (PPC Search Engine) suite with multiple PHP file inclusion vulnerabilities. The NVD and related records describe that remote attackers can execute arbitrary PHP code by passing a URL in the INC parameter across multiple files and directories, including config_ad...

PPC Search Engine 1.61 (INC) Multiple Remote File Include Vulnerabilities

No description provided by source. ============================ HItamputih Crew ==================== hitamputih Advisory Discovered By : IbnuSina ----------------------------------------------------------- script demo: http://www.hyper-scripts.com/demo/ppc/ Risk : very danger Thanks To : all...

PPC Search Engine 1.61 (INC) Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ========================================================================= PPC Search Engine 1.61 INC Multiple Remote File Include Vulnerabilities =========================================================================...

CVE-2006-6349

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...

CVE-2006-6132

Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via 1 the search engine field to search.asp and 2 psearch parameter to linkslist.asp...

CVE-2006-6132

Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via 1 the search engine field to search.asp and 2 psearch parameter to linkslist.asp...

Hacker network intrusion 1 4 can use the method-vulnerability warning-the black bar safety net

Upload vulnerabilitydoes not speak pS: if you see:Choose your file to upload re-uploador there is a“please login”, 8 0% there is a loophole! Sometimes the upload will not necessarily be successful,it is because Cookies are not the same. We will use WSockExpert made Cookies. Then use the DOMAIN...

CVE-2006-6030

Multiple SQL injection vulnerabilities in E-Calendar Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd Password fields in a admin/default.asp; or the 3 Event Title, 4 Location, or 5 Description field when making a search engine query in b search.asp...

Ultraseek信息泄露及请求代理漏洞

Ultraseek是一款企业级的搜索引擎。 Ultraseek中用于高亮显示蜘蛛抓取的页面中搜索条款的highlight脚本存在漏洞。攻击者可以直接访问/highlight/index.html中的highlight脚本，对其传送URL参数并检索内容。 攻击者还可以滥用该脚本枚举其他情况下无法访问的内部地址和开放端口。 Ultraseek的以下脚本还存在各种信息泄露漏洞： /help/urlstatusgo.html /help/header.html /help/footer.html /spell.html /coreforma.html /daterange.html...

Verity Ultraseek < 5.7 Multiple Vulnerabilities

The remote host is running Ultraseek, an enterprise web search engine. According to the version in its banner, an unauthenticated, remote attacker reportedly can use '/highlight/index.html' script on the remote install of Ultraseek as a proxy to launch web attacks or even enumerate internal...

Pilot Cart V.7.2 [ injection sql &#40;post&#41; ]

vendor site:http://www.pilotcart.com/ product:Pilot Cart V.7.2 bug:injection sql risk:high injection sqlpost : in the search engine: http://site.com/pilot.asp?pg=search&mode=results variables : srch='sql&searchBy=Products laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: saps.audit@gmail....

The Search Engine Project 0.942 - Configfunction.php Remote File Inclusion

The Search Engine Project 0.942 - Configfunction.php Remote File Inclusion source: https://www.securityfocus.com/bid/20831/info The Search Engine Project is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow a...

The Search Engine Project 0.942 - 'Configfunction.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20831/info The Search Engine Project is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

Debian DSA-999-1 : lurker - several vulnerabilities

Several security related problems have been discovered in lurker, an archive tool for mailing lists with integrated search engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1062 Lurker's mechanism for specifying configuration files was...

phpIncludes.txt

Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...