EUVD-2006-6195

Malware in sbrugna...

CVE-2023-41811 Stored XSS Via Site News Page

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allowed Javascript code to be executed in the news section of the web console. This issue affects Pandora FMS: from 700 throug...

Web Wiz Site News 3.6 Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7341/info Web Wiz Site News has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the Site News...

UtilMind Solutions Site News 1.1 Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11126/info Reportedly UtilMind Solutions Site News is affected by an authentication bypass vulnerability. This issue is due to an access validation error. An unauthenticated attacker can leverage this issue to display and...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP code via a URL in the supadbpath parameter to 1 commonfunctions.php, 2 adminauthcookies.php, 3 adminmods.php, 4 adminnews.php, 5 admintopics.php, 6 adminusers.php, 7...

CVE-2006-6212

PHP remote file inclusion vulnerability in centre.php in Site News sitenews 2.00, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party...

CVE-2006-6212

CVE-2006-6212 describes a PHP remote file inclusion in Site News (site_news) 2.00 and possibly earlier, where an attacker can cause arbitrary PHP code execution by supplying a URL in the page parameter. Affected component: centre.php. The vulnerability enables arbitrary code execution on the serv...

CVE-2006-6212

PHP remote file inclusion vulnerability in centre.php in Site News sitenews 2.00, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party...

Site News - centre.php Remote File Inclusion

Site News - centre.php Remote File Inclusion =================================================================================== Site News = centre.php $page Remote File Inclusion Exploit =================================================================================== Softname : Site News Url ...

Site News (centre.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== Site News centre.php Remote File Inclusion Vulnerability ==========================================================...

Site News - 'centre.php' Remote File Inclusion

=================================================================================== Site News = centre.php $page Remote File Inclusion Exploit =================================================================================== Softname : Site News Url : http://dvmet.free.fr/script/sitenews.zip...

WebWiz Products 1.03.06 - Authentication Bypass SQL Injection

WebWiz Products 1.03.06 - Authentication Bypass SQL Injection WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda s advisory Discovery and exploit by devilbox at kapda.ir Kapda - Security Science Researchers Institute of Iran WebWiz Login Bypass PoC - Database login - Kapd...

sitenewsAuth.txt

SecurityTracker Alert ID: 1011159 SecurityTracker URL: http://securitytracker.com/id?1011159 Date: Sep 5 2004 Impact: Modification of user information Exploit Included: Yes Versions: 1.1 Description: A vulnerability was reported in Site News. A local user can add or edit news items. LwB Security...

Site News v 1.1 admin head error

+| Advisory 16. Site News v 1.1 admin head error Software: Site News v 1.1 Problem-Type: local Platforms: All Vulnerability: admin error Date: 29'Aug 2004 discovered by XSPYD3X -xspyd3xatinboxdotru- HTTP: www.lwb57.org IRC: irc.lwb57.org:6667 lwb +:| Exploit |: Messages are added by the usual use...

Web Wiz Site News 3.6 - Information Disclosure

Web Wiz Site News 3.6 - Information Disclosure source: https://www.securityfocus.com/bid/7341/info Web Wiz Site News has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the...

Web Wiz Site News / Compulsive Media CNU5 news.mdb Direct Request Database Disclosure

The remote server is running Web Wiz Site News or Compulsive Media CNU5, a set of ASP scripts to manage a news website. This release comes with a 'news.mdb' database that contains sensitive information, such as the unencrypted news site administrator password and URLs to several news stories. An...

Web Wiz Site News 3.6 - Information Disclosure

source: https://www.securityfocus.com/bid/7341/info Web Wiz Site News has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the Site News appplication. Site News administration...