7118 matches found
miniBloggie 1.0 - 'Fname' Remote File Inclusion
source: https://www.securityfocus.com/bid/19476/info miniBloggie is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...
Simple One File Guestbook 1.0 - Security Bypass
Simple One File Guestbook 1.0 - Security Bypass source: https://www.securityfocus.com/bid/19437/info Simple one-file guestbook is prone to a security-bypass vulnerability. An attacker can bypass authentication measures by using a specific URL to delete all guestbook entries. Version 1.0 of Simple...
Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= Voodoo chat 1.0RC1b = filepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://vochat.com/ | |...
Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Voodoo chat ================================================================= Exploit : -------------------------------- http://sitename.com/Script...
Knusperleicht FAQ 1.0 Script - index.php Remote File Inclusion
Knusperleicht FAQ 1.0 Script - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19272/info FAQ Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote...
Knusperleicht FAQ 1.0 Script - 'index.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19272/info FAQ Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the conte...
perForms Mambo Component <= 1.0 Remote File Inclusion
No description provided by source. ------------------------------------------------------------------------ --- perForms = 1.0 mosConfigabsolutepath Remote File Inclusion ------------------------------------------------------------------------ --- Remote : Yes Critical Level : High Vuln founded i...
perForms <= 1.0 ([mosConfig_absolute_path]) Remote File Inclusion
--------------------------------------------------------------------------- perForms = 1.0 mosConfigabsolutepath Remote File Inclusion --------------------------------------------------------------------------- Remote : Yes Critical Level : High Vuln founded in a log file: lazy 0day!!! :D...
mAds10.txt
mAds v1.0 Homepage: http://lowpricescripts.com/productinfo.php?productsid=51 Affected files: Searching ----------------------------------- XSS vuln when searching: Like the hotbot XSS vuln, when searching mAds returns with its results they are generated dynamically on screen, with no filtering at...
cbsms.txt
--------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Yes...
CBSMS Mambo Module <= 1.0 Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romani...
MVNForum Activatemember 1.0 - Cross-Site Scripting
MVNForum Activatemember 1.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...
MVNForum Activatemember 1.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of a...
Secunia Research: CMS Mundo SQL Injection and File Upload Vulnerabilities
====================================================================== Secunia Research 14/06/2006 - CMS Mundo SQL Injection and File Upload Vulnerabilities - ====================================================================== Table of Contents Affected...
phpOnDirectory <= 1.0 Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= phpOnDirectory = 1.0 Remote File Include Vulnerabilities ========================================================= $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$...
[SA20155] Serendipity Entry Manager Cross-Site Request Forgery
TITLE: Serendipity Entry Manager Cross-Site Request Forgery SECUNIA ADVISORY ID: SA20155 VERIFY ADVISORY: http://secunia.com/advisories/20155/ CRITICAL: Less critical IMPACT: Hijacking WHERE: From remote SOFTWARE: Serendipity 0.x http://secunia.com/product/3969/ DESCRIPTION: A vulnerability has...
[SA19697] warforge.NEWS Multiple Vulnerabilities
TITLE: warforge.NEWS Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19697 VERIFY ADVISORY: http://secunia.com/advisories/19697/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote REVISION: 1.1 originally posted 2006-04-19 SOFTWARE: warforge.NEWS 1...
Advisory: TotalECommerce (index.asp id) Remote SQL Injection Vulnerability.
--Security Report-- Advisory: TotalECommerce index.asp id Remote SQL Injection Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 04/03/06 04:36 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: TotalECommerce...
Updated Noah Classifieds Component for Joomla!/Mambo
Updated Noah Classifieds Component for Joomla!/Mambo fixes vulnerabilities Problem: Several vulnerabilities were recently discovered in Noah Classifieds 1.3 which also affect the Joomla!/Mambo component. Details on the vulnerabilities are available at http://www.kapda.ir/advisory-268.html The...
CVE-2006-0664
Cross-site scripting XSS vulnerability in configdefaultsinc.php in Mantis before 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An...