PhpHostBot <= 1.06 (svr_rootscript) Remote File Inclusion Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV83$2007 ----------------------------------------------------------------------------------------- ECHOADV83$2007 PhpHostBot = 1.06 svrrootscript Remote File Inclusion...

BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass

BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass ----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability...

29o3 CMS &#40;LibDir&#41; Multiple Remote File Inclusion Vulnerability

Description: Some vulnerabilities have been discovered in 2903 CMS, which can be exploited by malicious people to compromise a vulnerable system. Input passed to the "CONFIGLibDir" parameter in multiple files is not properly verified before being used to include files. This can be exploited to...

BusinessSpace &lt;= 1.2 (id) Remote SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV102$2009 ----------------------------------------------------------------------------------------- ECHOADV102$2009 BusinessSpace = 1.2 id Remote SQL Injection Vulnerability...

social-sql.txt

HACKATTACK Advisory 2008-11-20Social Engine 2.7 CRLF Injection + SQL injection Details Product: Social Engine Security-Risk: moderate Remote-Exploit: yes Vendor-URL: http://www.socialengine.net/ Vendor-Status: informed Advisory-Status: published Credits Discovered by: David Vieira-Kurz of...

Attachmax Dolphin &lt;= 2.1.0 Multiple Remote Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

Attachmax Dolphin 2.1.0 - Multiple Vulnerabilities

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...

maranphp-xss.txt

---------------------------------------------------------------- Script : Maran PHP Blog Type : XSS Pasive Method : GET Alert : Medium ---------------------------------------------------------------- Discovered by : Khashayar Fereidani a.k.a. Dr.Crash My Offical Website : HTTP://FEREIDANI.IR...

[ECHO_ADV_94$2008] Kmita Mail &lt;= 3.0 &#40;file&#41; Remote File Inclusion Vulnerability

ECHOADV94$2008 ----------------------------------------------------------------------------------------- ECHOADV94$2008 Kmita Mail = 3.0 file Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

PostNuke Module pnEncyclopedia <= 0.2.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== PostNuke Module pnEncyclopedia = 0.2.0 SQL Injection Vulnerability =================================================================== \ /\ \ / | \ \ | / \ // / | \ | \...

Maian Weblog v4.0 XSS Vulnerabilities

---------------------------------------------------------------- Script : Maian Weblog v4.0 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...

Lifetype 1.2.7 XSS Vulnerability

---------------------------------------------------------------- Script : Lifetype 1.2.7 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Dr.Crash Or Khashayar Fereidani Our Team : IRCRASH...

bcoosexoops-xss.txt

bcoos & E-xoops DevTracker module two variables XSS vendor url: http://www.bcoos.net Vendor url: http://www.e-xoops.com Advisore: http://lostmon.blogspot.com/2008/02/ bcoos-and-e-xoops-devtracker-module-two.html vendor notify:yes exploits available: YES bcoos and E-xoops are two content-community...

dbList XSS vuln.

dbList XSS vuln. Vuln. discovered by : r0t Date: 7 October 2007 Vendor:http://www.livio.net/main/scripts.asp?fileid=24 affected versions:dbList v8.1 other versions also can be affected. dbList contains a flaw that allows a remote Cross-Site Scripting attacks.Input passed to the...

Interact multiple XSS vuln.

Interact multiple XSS vuln. Vuln. discovered by : r0t Date: 21 June 2007 vendor:www.interactole.org orginal advisory: http://pridels-team.blogspot.com/2007/06/interact-multiple-xss-vuln.html affected versions: tested on "Interact 2.4 beta 1" other versions also can be affected. Interact contains ...

WordPress Plugin wp-Table 1.43 - inc_dir Remote File Inclusion

WordPress Plugin wp-Table 1.43 - incdir Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV82$2007 ----------------------------------------------------------------------------------------- ECHOADV82$2007 wordpress plugins wp-Table = 1.43...

qdblog-lfisql.txt

. . . . | . .| . .;/ || Infos --------- Date : 2007-04-12 Product : QDBlog Version : v0.4 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/qdblog/ Vendor Status : 2007-04-12 - Not Informed! Description : QDBlog is an open-source, simple, minimalistic blogging...

CPS &lt;=3.4.0 XSS

CPS =3.4.0 XSS Vuln. discovered by : r0t Date: 30 april 2006 vendorlink:http://www.cps-project.org/ affected versions:3.4.0 and prior orginal avdisory: http://pridels.blogspot.com/2006/04/cps-340-xss.html Vuln. Description: CPS contains a flaw that allows a remote cross site scripting attack. Thi...

AWStats 6.5.x multiple vuln.

AWStats 6.5.x multiple vuln. Vuln. discovered by : r0t Date: 20 april 2006 vendorlink:http://awstats.sourceforge.net/ affected versions: 6.5 build 1.857 and prior orginal advisory: http://pridels.blogspot.com/2006/04/awstats-65x-multiple-vuln.html Vuln. Description: 1. Cross-Site Scripting AWStat...

Plexum X5 SQL vuln.

Plexum X5 SQL vuln. Vuln. discovered by : r0t Date: 19 april 2006 vendorlink:http://www.plexum.com/network/ affected versions:X5 and previous orginal advisory:http://pridels.blogspot.com/2006/04/plexum-x5-sql-vuln.html Vuln. Description: Plexum contains a flaw that allows a remote sql injection...