EUVD-2010-4832

Malware in sbrugna...

EUVD-2010-4833

Malware in sbrugna...

CVE-2010-4868

Cross-site scripting XSS vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter...

CVE-2010-4867

Directory traversal vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bn parameter...

CVE-2010-4868

CVE-2010-4868 affects W-Agora (4.2.1 and earlier), with a cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) exploitable via the bn parameter. OpenVAS notes also a local file-inclusion path, both arising from improper input sanitization. Impact described as arbitrary script/...

CVE-2010-4867

The CVE-2010-4867 entry affects W-Agora 4.2.1 and earlier. Affected component: search.php3 (aka search.php). Root cause: directory traversal via the bn parameter ( bn in URL ), allowing an attacker to include and execute local files. Consequence: remote arbitrary local file inclusion, with potent...

Vulnerability in mnoGoSearch

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в mnoGoSearch локальной поисковой системе. Уязвимость в скрипте search.php3 в параметре q. XSS: http://site/search/search.php3?q=3C/title3E3Cscript3Ealertdocument.cookie3C/script3E Уязвима версия mnoGoSearch 3.3.6 и...

Remote file inclusion

PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSAAINCPATH parameter in 1 cached.php3, 2 cron.php3, 3 discussion.php3, 4 filldisc.php3, 5 filler.php3, 6 fillform.php3, 7 go.php3, 8 hiercons.php3, 9...

APC ActionApps CMS 2.8.1 - Remote File Inclusion

DEVIL TEAM THE BEST POLISH TEAM APC ActionApps CMS 2.8.1 - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl site: http://sourceforge.net/projects/apc-aa/ / cached.php3:...