33 matches found
CVE-2007-0491: Undefined Security Weakness
PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter, a different vector than CVE-2006-4630. NOTE: Some of these details are obtained from third party information...
CVE-2007-0498: Undefined Security Weakness
PHP remote file inclusion vulnerability in up.php in MySpeach 2.1 beta and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the myroot parameter...
MySpeach 2.1b - up.php Remote File Inclusion
MySpeach 2.1b - up.php Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:MySpeach Affected Version:beta2.1 and maybe older Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip...
MySpeach <= 2.1b (up.php) Remote Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================== MySpeach = 2.1b up.php Remote Inclusion Vulnerability ========================================================...
MySpeach <= 2.1b (up.php) Remote Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:MySpeach Affected Version:beta2.1 and maybe older Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip...
CVE-2006-6389
CVE-2006-6389 and related CVEs describe multiple cross-site scripting (XSS) vulnerabilities in the ac4p Mobile application. The flaws enable remote attackers to inject arbitrary web script or HTML by submitting crafted input to specific parameters: (1) Taaa to up.php and (2) pollhtml and (3) Blok...
CVE-2006-6389: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via the 1 Taaa parameter to a up.php, or the 2 pollhtml and 3 Bloks parameters to b polls.php, different vectors than CVE-2006-5770...
ac4p.txt
Discovered : SwEET-DeViL Product: http://www.ac4p.com tame : AL-garnei Saudi Arabia // Vulnerabilities there again this link http://www.securityfocus.com/archive/1/450496/30/0/threaded // \1\ in up.php http://site.com/path/up.php?Taaa=XSS \2\ in polls.php http://site.com/path/polls.php?pollhtml=x...
CVE-2006-5770
Multiple cross-site scripting XSS vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via 1 Bloks, 2 Newnews, 3 lBlok, and 4 foooot parameter in a index.php; Newnews, 5 newmsgs, and Bloks parameter in b MobileNews.php; Newnews parameter in c polls.php; 6...
CVE-2006-5770: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via 1 Bloks, 2 Newnews, 3 lBlok, and 4 foooot parameter in a index.php; Newnews, 5 newmsgs, and Bloks parameter in b MobileNews.php; Newnews parameter in c polls.php; 6...
CVE-2005-1047
Meilad File upload script up.php mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory...
CVE-2005-1047: Undefined Security Weakness
Meilad File upload script up.php mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory...
phpBB Upload Script "up.php" Arbitrary File Upload
Advisory 1 "phpBB Upload Script "up.php" Arbitrary File Upload" $ Author: Status-x $ Contact: [email protected] - [email protected] $ Date: 7 April 2005 $ Website: http://defacers.com.mx $ Original Advisory: http://www.defacers.com.mx/advisories/2.txt $ Risk: High $ Vendor URL:...