312 matches found
CVE-2007-5677
Cross-site scripting XSS vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the goshout parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the goshout parameter...
CVE-2007-5677
Cross-site scripting XSS vulnerability in shoutbox/blocco.php in Hackish BETA 1.1 allows remote attackers to inject arbitrary web script or HTML via the goshout parameter...
CVE-2007-5677
CVE-2007-5677 describes a cross-site scripting (XSS) vulnerability in the Hackish BETA 1.1 software, specifically in the shoutbox/blocco.php component. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted value to the go_shout parameter. The vulnerabilit...
shoutbox-xss.txt
Hackish BETA 1.1 XSS Discovered by Matrix86 Vendor: http://hackish.eu POF http://site.com/hackish/shoutbox/blocco.php?goshout=Matrix86%3C/a%3E%3C/p%3E%3C/div%3E%3Chtml%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E%3C/html%3E...
Hackish XSS in shoutbox/blocco.php
Hackish BETA 1.1 XSS Discovered by Matrix86 Vendor: http://hackish.eu POF http://site.com/hackish/shoutbox/blocco.php?goshout=Matrix863C/a3E3C/p3E3C/div3E3Chtml3E3Cscript3Ealertdocument.cookie;3C/script3E3C/html3E...
Cross site scripting
Cross-site scripting XSS vulnerability in D22-Shoutbox for Invision Power Board IPB or IP.Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-4487
Cross-site scripting XSS vulnerability in D22-Shoutbox for Invision Power Board IPB or IP.Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-4487
Technical details about CVE-2007-4487 are not publicly available in the provided documents; monitor for updates. The data here only reiterates a generic XSS vulnerability in D22-Shoutbox for IPB.
CVE-2007-4330
PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...
CVE-2007-4330
CVE-2007-4330 describes a PHP remote file inclusion in Shoutbox 1.0 (shoutbox.php) that lets an attacker execute arbitrary PHP code by supplying a URL in the root parameter. The vulnerability stems from improper validation of the root input, enabling remote code injection over the network. Accord...
CVE-2007-4330
PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...
shoutbox-rfi.txt
Shoutbox 1.0 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : Shoutbox 1.0 Version : 1.0 Site : http://www.mapos-scripts.de Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack Thanks : Kurdish Hackers...
Shoutbox 1.0 Remote Command Execution Vulnerability
Shoutbox 1.0 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : Shoutbox 1.0 Version : 1.0 Site : http://www.mapos-scripts.de Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack Thanks : Kurdish Hackers...
Shoutbox 1.0 - Shoutbox.php Remote File Inclusion
Shoutbox 1.0 - Shoutbox.php Remote File Inclusion source: https://www.securityfocus.com/bid/25254/info Shoutbox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application a...
Shoutbox 1.0 - 'Shoutbox.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/25254/info Shoutbox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...
MySpeach <= 3.0.7 Remote/Local File Inclusion Vulnerability
No description provided by source. /======================================= | Advisory :: MySpeach = 3.0.7 | +=======================================+--------------------------------------------------------------- | | | Download link : http://www.graphiks.net/scripts-php/script-7-1-0.html | |...
MySpeach 3.0.7 - LocalRemote File Inclusion
MySpeach 3.0.7 - LocalRemote File Inclusion /=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | |...