CVE-2006-5282

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

CVE-2006-5282

SH-News 3.1 and earlier is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a URL in the scriptpath parameter to one of five pages: report.php, archive.php, comments.php, init.php, or news.php. The iss...

EUVD-2006-5267

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

CVE-2006-5282

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

CVE-2006-5282: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

SH-News (RFI)

================================================================== SH-News RFI ================================================================== Info:- Scripts: SH-News Download: http://www.hotscripts.com/jump.php?listingid=19561&jumptype=1 Version : 3.1 Dork & vuln : download scripts and think ...

SH-News 3.1 - 'scriptpath' Remote File Inclusion

================================================================== SH-News RFI ================================================================== Info:- Scripts: SH-News Download: http://www.hotscripts.com/jump.php?listingid=19561&jumptype=1 Version : 3.1 Dork & vuln : download scripts and think ...

SH-News <= 3.1 (scriptpath) Multiple Remote File Include Vulnerabilities

No description provided by source. ================================================================== SH-News RFI ================================================================== Info:- Scripts: SH-News Download: http://www.hotscripts.com/jump.php?listingid=19561&jumptype=1 Version : 3.1 Dork &...

SH-News 3.1 - scriptpath Remote File Inclusion

SH-News 3.1 - scriptpath Remote File Inclusion ================================================================== SH-News RFI ================================================================== Info:- Scripts: SH-News Download: http://www.hotscripts.com/jump.php?listingid=19561&jumptype=1 Version ...

SH-News <= 3.1 (scriptpath) Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== SH-News = 3.1 scriptpath Multiple Remote File Include Vulnerabilities ========================================================================...

linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes

Exploit for linux/x86 platform in category shellcode ================================================================ linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes ================================================================ / $Id: reusage-linux.c,v 1.3 2004/01/30 20:08:46...

linux/x86 stdin re-open and /bin/sh exec shellcode

linux/x86 stdin re-open and /bin/sh exec shellcode. Shellcode exploit for linx86 platform / $Id: gets-linux.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ gets-linux.c - stdin re-open shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi Local shellcode for stdin re-open and /bin/sh exec. It closes std...

[SA20781] GL-SH Deaf Forum show.php Cross-Site Scripting

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

CVE-2006-3246

Cross-site scripting XSS vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2006-3247

Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-3246

Cross-site scripting XSS vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2006-3246

CVE-2006-3246 describes a stored/reflected XSS in GL-SH Deaf Forum 6.4.3 and earlier, exploitable via the sort parameter in show.php. Impact: attacker can inject arbitrary script/HTML. Root cause: insufficient input sanitization for the sort parameter. Public remediation details are not provided ...

CVE-2006-3247

CVE-2006-3247 describes multiple cross-site scripting (XSS) vulnerabilities in the GL-SH Deaf Forum’s show.php (versions 6.4.3 and earlier). The flaws allow remote attackers to inject arbitrary script/HTML via the (1) search, (2) page, and (3) action parameters. The NVD entry lists a low base CVS...

CVE-2006-3247

Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-3247: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...