38 matches found
Jetik Emlak ESA 2.0 - Multiple SQL Injections
Jetik Emlak ESA 2.0 System Script KayitNo multiple remote sql inj ---------------------------------------------------------- Discovered By: ZoRLu Date: 24.09.2008 contact: [email protected] contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...
CVE-2006-6154
PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter...
CVE-2006-6155
Multiple SQL injection vulnerabilities in addrating.php in HIOX Star Rating System Script HSRS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ipadd or 2 url parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from thi...
CVE-2006-6154
PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter...
CVE-2006-6155
CVE-2006-6155 involves multiple SQL injection vulnerabilities in addrating.php of the HIOX Star Rating System Script (HSRS) 1.0 and earlier. The flaws allow remote attackers to inject and execute arbitrary SQL commands via the (1) ipadd or (2) url parameters. The description notes this informatio...
CVE-2006-6154
The CVE-2006-6154 entry affects HIOX Star Rating System Script (HSRS) version 1.0 and earlier, with a PHP remote file inclusion flaw in addcode.php that allows an attacker to execute arbitrary PHP code via a URL parameter hm. This is described across NVD records; the base CVSSv2 score is 7.5 (HIG...
CVE-2006-6156
The CVE-2006-6156 entry describes a Cross-site scripting (XSS) vulnerability in the HIOX Star Rating System Script (HSRS) up to version 1.0, with the flaw located in auth/message.php and exploitable via the PHP_SELF query string. The underlying cause is unencoded user input that allows arbitrary ...
CVE-2006-6154: Undefined Security Weakness
PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter...
CVE-2006-6155: Undefined Security Weakness
Multiple SQL injection vulnerabilities in addrating.php in HIOX Star Rating System Script HSRS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ipadd or 2 url parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from thi...
CVE-2006-6156: Undefined Security Weakness
Cross-site scripting XSS vulnerability in auth/message.php in HIOX Star Rating System Script HSRS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string PHPSELF. NOTE: The provenance of this information is unknown; the details are obtained solely from...
HSRS 1.0 - addcode.php Remote File Inclusion
HSRS 1.0 - addcode.php Remote File Inclusion --------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- HSRS = 1.0 HIOX Star Rating System Script...
HSRS 1.0 - 'addcode.php' Remote File Inclusion
--------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- HSRS = 1.0 HIOX Star Rating System Script addcode.php Remote File Include Vulnerability Foun...
HSRS 1.0 (addcode.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================== HSRS 1.0 addcode.php Remote File Include Vulnerability ======================================================== --------------------------------------|| Viva Palestine...
CVE-2006-2326
The CVE describes a directory traversal vulnerability in index.php of the OnlyScript.info Online Universal Payment System Script. The flaw allows remote attackers to read arbitrary files via traversal sequences in the read parameter, leading to partial confidentiality impact. Affected component: ...
CVE-2006-2325: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...
CVE-2006-2326: Undefined Security Weakness
Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to read arbitrary files via directory traversal sequences in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely fr...
CVE-2006-2325
CVE-2006-2325 describes a cross-site scripting (XSS) vulnerability in index.php of the OnlyScript.info Online Universal Payment System Script. It allows remote attackers to inject arbitrary web script or HTML via the read parameter, with the note that the issue might originate from directory trav...
