CVE-2006-0156

CVE-2006-0156 is a cross-site scripting vulnerability in Foxrum 4.0.4f that allows remote attackers to inject arbitrary Javascript via the javascript: URI used in bbcode url tags in the files addpost1.php and addtopic1.php . The issue is triggered by crafting URLs in bbcode that execute JavaScrip...

CVE-2006-0155

Cross-site scripting XSS vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI...

CVE-2006-0155

CVE-2006-0155 describes a cross-site scripting (XSS) flaw in the 427BB web app, specifically in posts.php across versions 2.2 and 2.2.1. The issue arises when a user submits a new message that uses a url BBCode tag containing a javascript URI, allowing remote attackers to inject arbitrary JavaScr...

[SA18354] 427BB Multiple Vulnerabilities

TITLE: 427BB Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18354 VERIFY ADVISORY: http://secunia.com/advisories/18354/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: 427BB 2.x http://secunia.com/product/4730/...

FlatCMS 1.01 - 'file_editor.php' Remote Command Execution

!/usr/bin/perl FlatCMS All rights reserved. An input validation flaw exists within 'admin/fileeditor.php' of FlatCMS which can lead to remote command execution. Here is where the problem is line 22 of 97: ... 1 if$savefile != "" 2 $fcontent = stripslashes"$fcontent"; if!$fw = fopen$savefile, w ec...

Valdersoft Shopping Cart <= 3.0 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================================ Valdersoft Shopping Cart All rights reserved. 1. example email protected:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store email protected /$ id;uname -a...

CuteNews &lt;= 1.4.1 (categories.mdu) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl cijfer-cnxpl - CuteNews =1.4.1 Remote Command Execution Copyright c 2005 cijfer [email protected] All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-cnxpl.pl -h www.xxxx.org -d /news [email protected] /$ id;uname -a uid=48apache...

Plogger exploit method! - Vulnerability warning-the black bar safety net

http://www.hackeroo.com/Plogger 是 一 款 基于 PHP 的 网络日记 程序 the. Plogger does not filter the user submits the URI of the data, exploit vulnerabilities in the WEB permissions to execute arbitrary commands. Vulnerability in'plog-admin-functions.php'script for user-submitted'configbasedir'parameter is no...

Microsoft IIS - HTTP Request Denial of Service

/ Name: Microsoft IIS Malformed URI DoS vtibin, sharepoint Exploit File: Microsoft.IIS.Malformed.URI.DoS.vtibin,sharepoint.cpp Author: Lympex Contact: .- Mail: lympexatgmaildotcom .- Web: http://l-bytes.tk Date: 20/12/2005 Info: http://www.securiteam.com/windowsntfocus/6E00E2KEUS.html / include...

MS Windows IIS Malformed HTTP Request Denial of Service Exploit (cpp)

Exploit for unknown platform in category dos / poc ===================================================================== MS Windows IIS Malformed HTTP Request Denial of Service Exploit cpp ===================================================================== / Name: Microsoft IIS Malformed URI Do...

MS Windows IIS Malformed HTTP Request Denial of Service Exploit (cpp)

No description provided by source. / Name: Microsoft IIS Malformed URI DoS vtibin, sharepoint Exploit File: Microsoft.IIS.Malformed.URI.DoS.vtibin,sharepoint.cpp Author: Lympex Contact: .- Mail: lympexatgmaildotcom .- Web: http://l-bytes.tk Date: 20/12/2005 Info:...

Microsoft IIS - HTTP Request Denial of Service

Microsoft IIS - HTTP Request Denial of Service / Name: Microsoft IIS Malformed URI DoS vtibin, sharepoint Exploit File: Microsoft.IIS.Malformed.URI.DoS.vtibin,sharepoint.cpp Author: Lympex Contact: .- Mail: lympexatgmaildotcom .- Web: http://l-bytes.tk Date: 20/12/2005 Info:...

phpMyAdminSQL.txt

phpMyAdmin serverprivileges.php SQL Injection Vulnerabilities. I. BACKGROUND phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. II. DESCRIPTION phpMyAdmin serverprivileges.php is prone to SQL Injection vulnerability. A remote attacker may execute...

phpMyAdmin server_privileges.php SQL Injection Vulnerabilities.

phpMyAdmin serverprivileges.php SQL Injection Vulnerabilities. I. BACKGROUND phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. II. DESCRIPTION phpMyAdmin serverprivileges.php is prone to SQL Injection vulnerability. A remote attacker may execute...

CVE-2004-2618

Pegasi Web Server (PWS) 0.2.2 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the URI, directly after the initial '/'. The issue is tied to the URI path component and is documented across CVE-2004-2618/NVD; no speci...

CVE-2005-3890

CVE-2005-3890 affects Gadu-Gadu version 7.20. A remote attacker can cause a denial of service (crash and configuration loss) by loading a page containing a large number of gg: URIs. The available sources identify the affected product and the impact (DoS), but do not provide exploitable details be...

[KAPDA::#14] - PHPPost XSS and HTML Injection

KAPDA New advisory Vendor: http://www.php-post.co.uk/ Vulnerable Version: v1.0 Bug: XSS and HTML Injection Exploitation: Remote with browser Description: -------------------- PHPP is a free message board powered by PHP and MySQL. Vulnerability: -------------------- HTML Injection: The software do...

CVE-2004-2548

Multiple cross-site scripting XSS vulnerabilities in NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to inject arbitrary web script or HTML via a a URI containing the script, or b the username field in the login form. NOTE: it is possible that the first attack vector is...

Revize CMS - Revize.XML Information Disclosure

Revize CMS - Revize.XML Information Disclosure source: https://www.securityfocus.com/bid/15482/info Revize CMS is prone to an information disclosure vulnerability. This issue is due to a failure in the application to restrict access to sensitive files. An attacker can exploit this vulnerability t...

RHEL 2.1 / 3 / 4 : lynx (RHSA-2005:839)

An updated lynx package that corrects a security flaw is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Lynx is a text-based Web browser. An arbitrary command execute bug was found in the lynx 'lynxcgi:' URI handler. An attacker...