CVE-2008-3402

Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics HBS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the hm parameter to 1 hioxupdate.php and 2 hioxstats.php...

CVE-2008-3402

CVE-2008-3402 affects HIOX Browser Statistics (HBS) 2.0. It uses PHP remote file inclusion via a URL in the hm parameter to hioxupdate.php and hioxstats.php, enabling remote code execution. The NVD/NVD-derived entry shows a CVSSv2 base score of 7.5 (HIGH) with NETWORK attack vector and LOW attack...

CVE-2008-3402: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics HBS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the hm parameter to 1 hioxupdate.php and 2 hioxstats.php...

HIOX Browser Statistics远程文件包含漏洞

BUGTRAQ ID: 30436 CNCAN ID：CNCAN-2008073112 HIOX Browser Statistics是一款基于PHP的论坛程序。 HIOX Browser Statistics不正确过滤用户提交的参数，远程攻击者可以利用漏洞以WEB进程权限执行任意PHP代码。 问题是脚本不正确过滤用户提交的WEB参数，指定远程服务器上的任意文件作为包含对象，可导致以WEB进程权限执行任意PHP代码。 HIOX Browser Statistics 2.0 目前没有解决方案提供： http://hscripts.com/...

HIOX Browser Statistics 2.0 Arbitrary Add Admin User Exploit

No description provided by source. ?php @sessionstart; ? table align=center width=72% height=95% trtd ?php / HIOX Browser Statistics 2.0 Arbitrary Add Admin User Vulnerability Discoverd & exploited by Stack Greeatz All Freaind Special thnx to Str0ke Name Script : HIOX Browser Statistics 2.0...

HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability

No description provided by source. HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker - R-H Team - |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ \o | My Email : [email protected] |/ /...

HIOX Browser Statistics 2.0 - Remote File Inclusion

HIOX Browser Statistics 2.0 - Remote File Inclusion HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker - R-H Team - |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ \o | My Email :...

HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability

HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker - R-H Team - |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ o | My Email : [email protected] |/ / | Name Script : HIOX Browser...

HIOX Browser Statistics 2.0 Arbitrary Add Admin User Exploit

Exploit for unknown platform in category web applications ============================================================ HIOX Browser Statistics 2.0 Arbitrary Add Admin User Exploit ============================================================ "; fclose$file; $creat = "false"; echo "New User Created...

HIOX Browser Statistics 2.0 - Arbitrary Add Admin

"; fclose$file; $creat = "false"; echo "New User Created Please Wait You will be Redirected to Login Page "; else echo "Enter correct Username or Password "; if$creat == "true" ? table align=center valign=center bgcolor=000000 align=center cellpadding=0 style="border: 1p...

HIOX Browser Statistics 2.0 - Remote File Inclusion

HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker - R-H Team - |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ \o | My Email : [email protected] |/ /\ | Name Script : HIOX Browser...

[SECURITY] Fedora 9 Update: sipp-3.1-2.fc9

SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

[SECURITY] Fedora 9 Update: sipp-3.1-2.fc9

SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

Authentication flaw

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...

CVE-2008-2062

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM before 4.23SR4, and 4.3 before 4.32SR1, allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the servic...

CVE-2008-2730

The Real-Time Information Server RIS Data Collector service in Cisco Unified Communications Manager CUCM 5.x before 5.13 and 6.x before 6.11 allows remote attackers to bypass authentication, and obtain cluster configuration information and statistics, via a direct TCP connection to the service...

Yahoo! Statistical functions cross-site scripting vulnerability-vulnerability warning-the black bar safety net

Source: 80sec Vulnerability Description: The yahoo statistics function is widely used for site access statistics, used to make a variety of data analysis such as access to the source, The Client Access page statistics, etc., specific information can access the web site http://tongjia. yahoo. cn...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Statistics aka kestats extension 0.1.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in the Statistics aka kestats extension 0.1.2 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-2450

Multiple cross-site scripting XSS vulnerabilities in the Statistics aka kestats extension 0.1.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...