FreeBSD : Dokuwiki -- XSS vulnerability (2fe4b57f-d110-11e1-ac76-10bf48230856)

Secunia Research reports : Secunia Research has discovered a vulnerability in DokuWiki, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to the 'ns' POST parameter in lib/exe/ajax.php when 'call' is set to 'medialist' and 'do' is set to 'media' is n...

CVE-2012-0283

DokuWiki vulnerability CVE-2012-0283: XSS in tpl_mediaFileList (inc/template.php) allows injection via the ns parameter in medialist action to lib/exe/ajax.php. Affected: DokuWiki releases prior to 2012-01-25b; exploit could deliver arbitrary HTML/script. Remediation: upgrade to the latest DokuWi...

CVE-2012-2715: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the themeslinks function in template.php in the Amadou theme module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to class attributes in a list of links...

CVE-2012-2907: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the aberdeenbreadcrumb function in template.php in the Aberdeen theme 6.x-1.x before 6.x-1.11 for Drupal, when set to append the content title to the breadcrumb, allows remote attackers to inject arbitrary web script or HTML via the content title in a...

4images 1.7.6 > 9 Csrf inject php code

Exploit for php platform in category web applications !/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xS...

4Images 1.7.6 Cross Site Request Forgery

!/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xSs m4n i-Hmx h311c0d3 |.sp. abo.B4sil | HcJ Cyb3r...

4Images 1.7.6-9 - Cross-Site Request Forgery PHP Code Injection

4Images 1.7.6-9 - Cross-Site Request Forgery PHP Code Injection !/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54...

CVE-2011-3745

HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/hycustemplate/template.php...

CVE-2011-3702: Exposure of Sensitive Information to an Unauthorized Actor

Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/template.php and certain other files...

CVE-2011-3745: Exposure of Sensitive Information to an Unauthorized Actor

HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/hycustemplate/template.php...

Wordpress 3.2.1 Core Module(post-template.php) Improper Sanitizing XSS

Exploit for php platform in category web applications Exploit Title : Wordpress 3.2.1 Core Modulepost-template.php Improper SanitizingPersistent Cross Site Scripting Vulnerability Author : Darshit Ashara Date : 21/08/2011 Vendor : Wordpress Version: 3.2.1 Software Link...

CVE-2010-1528: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

Uigaproxy Remote File Inclusion

coded by ahmadbady //=========================================================================== // Topic : uigaproxy // Bug type : remote file include // Download : http://www.scriptdevelopers.net/download/uigaproxy.zip // Advisory :...

CVE-2010-1216

The CVE-2010-1216 entry concerns PHP remote file inclusion in notsoPureEdit prior to or including version 1.4.1, triggered when register_globals is enabled. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the content parameter, via a crafted request to tem...

CVE-2010-1216: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter. NOTE: some of these details are obtained from third party information...

NotSopureEdit <= 1.4.1 Remote File Include Vulnerability

======================================================== NotSopureEdit = 1.4.1 Remote File Include Vulnerability ======================================================== + NotSopureEdit = 1.4.1 Remote File Include Vulnerability...

WordPress <2.0.6 Template.php 跨站脚本攻击漏洞

No description provided by source...

CVE-2008-6112: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. dot dot in the id parameter in a detail action to 1 main.php and 2 template.php in ringtones/...

CVE-2008-5860

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...

Directory traversal

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...