6478 matches found
phptopwebs-rfi.txt
===================================================================== PHP Top webs config.php Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download...
security flaw
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting XSS attacks using DOM methods of the top-level object...
CVE-2006-3769
Multiple cross-site scripting XSS vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pass and 2 pass2 parameters in a add.php or the 3 id parameter in b members/index.php...
[MajorSecurity #22] Top XL <=1.1 - XSS and cookie disclosure
MajorSecurity 22 Top XL =1.1 - XSS and cookie disclosure ----------------------------------------------------------------- Software: Top XL Version: =1.1 Type: Cross site scripting and cookie disclosure Made public: July, 20th 2006 Vendor: http://www.paddelberg.de Page: http://www.paddelberg.de...
CVE-2006-3769
Multiple cross-site scripting XSS vulnerabilities in Top XL 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pass and 2 pass2 parameters in a add.php or the 3 id parameter in b members/index.php...
CVE-2006-3769
Top XL 1.1 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. The issue arises from user-supplied input in specific parameters: (1) pass and (2) pass2 in add.php, and (3) id in members/index.php. Successful exploitation would allow remote attackers to inject arbitrar...
CVE-2006-2643
Cross-site scripting XSS vulnerability in index.php in Monster Top List MTL 1.4 allows remote attackers to inject arbitrary web script or HTML via the usererrormessage parameter...
CVE-2006-2643
Cross-site scripting XSS vulnerability in index.php in Monster Top List MTL 1.4 allows remote attackers to inject arbitrary web script or HTML via the usererrormessage parameter...
XSS in Monster Top List | MTL 1.4
XSS in Monster Top List | MTL 1.4 --------------------------------- Software : Monster Top List --------------------------------- version : Monster Top List 1.4 --------------------------------- Exploit : www.site.com/index.phpusererrormessage=XSS-CODE --------------------------------- Discovery ...
Monster Top List sources/functions.php root_path Parameter Remote File Inclusion
The remote host is running Monster Top List, a site rating script written in PHP. The installed version of Monster Top List fails to sanitize user input to the 'rootpath' parameter in sources/functions.php before using it to include PHP code from other files. An unauthenticated attacker may be ab...
Monster Top List 1.4 - 'functions.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/17546/info Monster Top List is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...
CVE-2005-4781
Multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the 1 idartist, 2 idsong, and 3 idalbum parameters to modules.php...
CVE-2005-4781
CVE-2005-4781 refers to multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke. The vulnerabilities allow remote attackers to inject arbitrary SQL via the parameters (1) idartist, (2) idsong, and (3) idalbum in modules.php. The NVD entry lists a CVSS2 ...
Remote file inclusion
PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List MTL 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: It was later reported that 1.4.2 and earlier are affected...
CVE-2006-1781
CVE-2006-1781 affects Monster Top List (MTL) “Circle R Monster Top List” version 1.4 and earlier. The vulnerability lies in the PHP file sources/functions.php, where the root_path parameter is not sanitized before being used to include PHP code from other files. This creates a remote file inclusi...
CVE-2006-1781
PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List MTL 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: It was later reported that 1.4.2 and earlier are affected...
XSS in Monster Top List 1.4
Advisory: XSS in Monster Top List 1.4 Home Page: http://www.monstertoplist.com/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php Exploit: http://www.monstertoplist.com/mtl14/index.php?usererrormessage=scriptalert/script...
Free Articles Directory Remote Command Exucetion
Web Site : http://www.99articles.com Script Demo Site : http://www.articlesone.com General : 1. Support rssfeed XML to distribute articles for others website and blogs. It will make grow website popularity 2. Newsletter to be growing visitors 3. Membership system for writer participants submit...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrary files via the page parameter...
CVE-2006-0969
The CVE-2006-0969 entry concerns a PHP remote file inclusion vulnerability in the page parameter of index.php within Top sites de PixelArtKingdom. The underlying issue is unsafely using the page parameter in an include/require operation, enabling remote attackers to cause arbitrary file inclusion...