Allons_voter Version 1.0 xss and admin votes

Allonsvoter Version 1.0 xss and admin votes wihtout password By : sn0oPy Risk : medium Dork : inurl:"Allonsvoter" exploit : Be admin : http://www.target.com/Allonsvoter/menu.html replace it by http://www.target.com/Allonsvoter/adminajouter.php or http://www.target.com/Allonsvoter/adminsupprimer.p...

Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities

No description provided by source. Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus &nbs...

JAF CMS Forum.PHP远程文件包含漏洞

Salims Softhouse JAF CMS是一款基于PHP的内容管理程序。 Salims Softhouse JAF CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Forum.PHP'脚本对用户提交的'applAPPL'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Salims Softhouse JAF CMS 4.0 RC1 Salims Softhouse JAF CMS 3.0 RC Salims Softhouse JAF CMS 2.5 Salims Softhous...

webcal10-xss.txt

WebCalendar =1.0 Cross-Site Scripting Vulnerabilities |=---= WebCalendar =1.0 Cross-Site Scripting Vulnerabilities ---=| |=-----------------------------------------------------------------=| |=---------------= 7all =----------------------=|...

Contra Haber Sistemi 1.0 - 'Haber.asp' SQL Injection

source: https://www.securityfocus.com/bid/21626/info Contra Haber Sistemi is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Contra Haber Sistemi 1.0 - Haber.asp SQL Injection

Contra Haber Sistemi 1.0 - Haber.asp SQL Injection source: https://www.securityfocus.com/bid/21626/info Contra Haber Sistemi is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

GenesisTrader 1.0 - 'form.php' Arbitrary File Source Disclosure

source: https://www.securityfocus.com/bid/21595/info GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple information-disclosure vulnerabilities, an arbitrary file-upload...

GenesisTrader 1.0 - form.php Multiple Cross-Site Scripting Vulnerabilities

GenesisTrader 1.0 - form.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/21595/info GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include...

GenesisTrader 1.0 - form.php Arbitrary File Source Disclosure

GenesisTrader 1.0 - form.php Arbitrary File Source Disclosure source: https://www.securityfocus.com/bid/21595/info GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple...

Lotfian Request For Travel 1.0 - ProductDetails.asp SQL Injection

Lotfian Request For Travel 1.0 - ProductDetails.asp SQL Injection source: https://www.securityfocus.com/bid/21536/info Request For Travel is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

jambook.txt

------=Part12610429492606.1164565546478 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Advisory 14 Title: Mambo component "jambook" Html injection Vulnerability Author: 0ozeuso0 Arturo Z. Contact: zeus at diosdelared.com...

PT-2006-6670 · Bloo · Bloo

Name of the Vulnerable Software and Affected Versions: Bloo versions 1.0 Description: A remote file inclusion issue in phoo.base.php allows remote attackers to execute arbitrary PHP code via a URL in the descriptorFileList parameter. This issue is disputed, as $descriptorFileList is used within a...

PHP Upload Tool 1.0 - Arbitrary File Upload / Directory Traversal

source: https://www.securityfocus.com/bid/21150/info PHP Upload Tool is prone to an arbitrary file-upload vulnerability and a directory-traversal vulnerability. These issues occur because the application fails to sanitize user-supplied data. An attacker could exploit these issues to execute code ...

PHP Upload Tool 1.0 - Arbitrary File Upload Directory Traversal

PHP Upload Tool 1.0 - Arbitrary File Upload Directory Traversal source: https://www.securityfocus.com/bid/21150/info PHP Upload Tool is prone to an arbitrary file-upload vulnerability and a directory-traversal vulnerability. These issues occur because the application fails to sanitize user-suppli...

Xoops 2.0.5 - 'NewList.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20927/info Xoops is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of...

Techno Dreams Guestbook 1.0 - 'key' SQL Injection

Title : Techno Dreams Guestbook v1.0 guestbookview.asp Remote SQL Injection Vulnerability Author : ajann Script Page: http://www.t-dreams.com http://target/path/guestbookview.asp?key= SQL Example: //guestbookview.asp?key=7782%20union%20select%200,0,adminname,password,0,0,0%20from%20admin...

MPCS 1.0 - path Remote File Inclusion

MPCS 1.0 - path Remote File Inclusion ================================================================== Multi-Page Comment System RFI ================================================================== Info:- Scripts: Multi-Page Comment System MPCS Home: http://tpvgames.co.uk/web/mpcs/ Download:...

phpBB User Viewed Posts Tracker Version <= 1.0 [phpbb_root_path] File Include Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= phpBB User Viewed Posts Tracker Version = 1.0 phpbbrootpath File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovered by XORONturkish...

phpBB Static Topics <= 1.0 [phpbb_root_path] Remote File Include Vulnerability

--------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net :...

Opial Audio/Video Download Management - Version 1.0 index.php Xss vulns.

web application : Opial Audio/Video Download Management Version : 1.0 site : http://www.opial.com ------------------------------------------------ Exploit : --------- http://www.example.com/path/index.php?view=Login&destination=xss ------------------------------------------------ Dicovered : by...