352 matches found
Webfroot Shoutbox 2.32 - Remote Command Execution
source: https://www.securityfocus.com/bid/7746/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of the 'conf' URI parameter. An attacker can exploit this vulnerability to execute arbitrary...
Webfroot Shoutbox < 2.32 (Apache) - Local File Inclusion / Remote Code Execution
!/usr/bin/perl Webfroot Shoutbox ';fclose$h;? HTTP/1.1\nHost: 127.0.0.1\nConnection: Close\n\n"; my $conn; if $ARGV0 eq "x" || $ARGV0 eq "r" $type = $ARGV0; else print "x Webfroot Shoutbox 2.32 on apache exploit \n\n"; print "Usage: \n Webfroot.pl x|r host command path port\n"; print "\ttype\tx =...
Webfroot Shoutbox < 2.32 (Apache) Remote Exploit
No description provided by source. !/usr/bin/perl Webfroot Shoutbox 2.32 on apache exploit use IO::Socket; my $host = "127.0.0.1"; my $port = 80; my $shoutbox = "shoutbox.php?conf="; my $shoutboxpath = "/shoutbox"; my $cmd = "ls -l"; my $conn; my $type; my @logs = "/etc/httpd/logs/acceslog",...
Webfroot shoutbox.php conf Parameter Traversal Local File Inclusion
The remote host is running Webfroot Shoutbox, a PHP application that allows website visitors to leave one another messages. The version of Webfroot Shoutbox installed on the remote host allows an attacker to read arbitrary files and possibly to inject arbitrary PHP code into the remote host and...
CVE-2002-1429
Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...
CVE-2002-1429
Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...
CVE-2002-1429
The CVE-2002-1429 entry corresponds to a cross-site scripting (XSS) vulnerability in endity.com’s ShoutBOX, specifically in the board.php handler. The flaw allows remote attackers to inject arbitrary HTML into the shoutbox page by manipulating the site parameter. Documents confirm the affected co...
CVE-2002-1429: Undefined Security Weakness
Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...
PT-2003-1176 · Endity.Com · Shoutbox
Name of the Vulnerable Software and Affected Versions: ShoutBOX affected versions not specified Description: A cross-site scripting issue exists in the board.php file of ShoutBOX on endity.com, allowing remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...
[SCSA-003] Multiple Cross Site Scripting & Script Injection Vulnerabilities in Nuked-Klan
.: Multiple Cross Site Scripting & Script Injection Vulnerabilities in Nuked-Klan :. Security Corporation Security Advisory SCSA-003 PROGRAM: Nuked-Klan HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: beta 1.2 and prior DESCRIPTION Nuked Klan is a PHP Gateway for "clans". direct quote fr...
Code injection Vulnerability in endity.com's shoutBOX
Overview ----------------------- A shoutbox is a fun tool webmasters put on their site that allows them to receive feedback from users quickly. By typing in their name, site URL, & message, users can post comments, suggestions, praises, flames, etc. onto the shoutbox and it will be seen by everyo...
ShoutBox 1.2 - 'Form' HTML Injection
source: https://www.securityfocus.com/bid/5354/info shoutBOX does not sufficiently sanitize HTML tags from input supplied via form fields. Attackers may exploit this lack of input validation to inject arbitrary HTML and script code into pages that are generated by the script. This may result in...