Code injection

Static code injection vulnerability in addreg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted 1 url and 2 location parameter...

CVE-2009-2110

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...

CVE-2009-2111

CVE-2009-2111 affects DB Top Sites 1.0, with a vulnerability in the file add_reg.php that allows static code injection . A remote attacker can inject arbitrary PHP code by supplying crafted parameters for the (1) url and (2) location, enabling code execution on the affected system. This is docume...

CVE-2009-2110

Affected software: DB Top Sites 1.0. Vulnerability type: directory traversal leading to local file inclusion/execution via the u parameter in full.php, index.php, and contact.php when magic_quotes_gpc is disabled. Root cause: directory traversal with .. in the parameter. Impact: remote attackers ...

CVE-2009-2110: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the u parameter to 1 full.php, 2 index.php, and 3 contact.php...

CVE-2009-2111: Improper Control of Generation of Code

Static code injection vulnerability in addreg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted 1 url and 2 location parameter...

CVE-2009-2095: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in template/simpledefault/admin/masterlayout.php in Mundi Mail 0.8.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allowurlfopen is disabled, directory traversal attacks ar...

DB Top Sites 1.0 (index.php u) Local File Inclusion Vulnerability

No description provided by source. + DB Top Sites v1.0 index.php u Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + Local File Inclusion - Vulnerable code is everywhere...

DB Top Sites 1.0 - index.php?u Local File Inclusion

DB Top Sites 1.0 - index.php?u Local File Inclusion + DB Top Sites v1.0 index.php u Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + Local File Inclusion - Vulnerable code is everywhere...

IT staffs pressured to relax Web security

From SearchSecurity.com Rob Westervelt IT managers are under pressure from the top executives in their organizations to relax their policies on Web security in order to make users more productive. A new survey of more than 1,000 IT managers found that sales and marketing personnel also are leanin...

Counterpoint: The need for a cybersecurity czar is real

As everyone prepares to examine the results of the Obama Administration’s cyber-security review, one of the largest issues in play remains to what extent the White House will embrace recommendations to create a Cabinet-level position to address the matter or some role superior to today’s “cyber...

MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling

MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling ---------------------------------------------------------------...

MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ====================================================== MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln ====================================================== --------------------------------------------------------------- MRCGIGUY T...

MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling --------------------------------------------------------------- Founder :ThE g0bL!N...

MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling

--------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.mrcgiguy.com MRCGIGU...

Mandriva Update for procps MDKA-2007:131 (procps)

Check for the Version of procps OpenVAS Vulnerability Test Mandriva Update for procps MDKA-2007:131 procps Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Sql injection

SQL injection vulnerability in topsite.php in Scripts For Sites SFS EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter...

CVE-2008-6247

CVE-2008-6247 affects Scripts For Sites (SFS) EZ Top Sites, with a SQL injection in topsite.php exploitable via the ts parameter. The vulnerability occurs in user input handling that allows arbitrary SQL commands to be executed by an attacker remotely. Connected sources confirm the affected compo...

CVE-2008-6247: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in topsite.php in Scripts For Sites SFS EZ Top Sites allows remote attackers to execute arbitrary SQL commands via the ts parameter...

Profense Web Application Firewall 2.6.2 XSRF/XSS Vulnerabilities

Exploit for unknown platform in category remote exploits ================================================================ Profense Web Application Firewall 2.6.2 XSRF/XSS Vulnerabilities ================================================================ Written By Michael Brooks Special thanks to...