7134 matches found
Knusperleicht FAQ 1.0 Script - index.php Remote File Inclusion
Knusperleicht FAQ 1.0 Script - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19272/info FAQ Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote...
Knusperleicht FAQ 1.0 Script - 'index.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19272/info FAQ Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the conte...
perForms Mambo Component <= 1.0 Remote File Inclusion
No description provided by source. ------------------------------------------------------------------------ --- perForms = 1.0 mosConfigabsolutepath Remote File Inclusion ------------------------------------------------------------------------ --- Remote : Yes Critical Level : High Vuln founded i...
perForms <= 1.0 ([mosConfig_absolute_path]) Remote File Inclusion
--------------------------------------------------------------------------- perForms = 1.0 mosConfigabsolutepath Remote File Inclusion --------------------------------------------------------------------------- Remote : Yes Critical Level : High Vuln founded in a log file: lazy 0day!!! :D...
mAds10.txt
mAds v1.0 Homepage: http://lowpricescripts.com/productinfo.php?productsid=51 Affected files: Searching ----------------------------------- XSS vuln when searching: Like the hotbot XSS vuln, when searching mAds returns with its results they are generated dynamically on screen, with no filtering at...
cbsms.txt
--------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Yes...
CBSMS Mambo Module <= 1.0 Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- CBSMS Mambo Module = 1.0 mosConfigabsolutepath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romani...
MVNForum Activatemember 1.0 - Cross-Site Scripting
MVNForum Activatemember 1.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...
MVNForum Activatemember 1.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of a...
Secunia Research: CMS Mundo SQL Injection and File Upload Vulnerabilities
====================================================================== Secunia Research 14/06/2006 - CMS Mundo SQL Injection and File Upload Vulnerabilities - ====================================================================== Table of Contents Affected...
phpOnDirectory <= 1.0 Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= phpOnDirectory = 1.0 Remote File Include Vulnerabilities ========================================================= $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$...
[SA20155] Serendipity Entry Manager Cross-Site Request Forgery
TITLE: Serendipity Entry Manager Cross-Site Request Forgery SECUNIA ADVISORY ID: SA20155 VERIFY ADVISORY: http://secunia.com/advisories/20155/ CRITICAL: Less critical IMPACT: Hijacking WHERE: From remote SOFTWARE: Serendipity 0.x http://secunia.com/product/3969/ DESCRIPTION: A vulnerability has...
[SA19697] warforge.NEWS Multiple Vulnerabilities
TITLE: warforge.NEWS Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19697 VERIFY ADVISORY: http://secunia.com/advisories/19697/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote REVISION: 1.1 originally posted 2006-04-19 SOFTWARE: warforge.NEWS 1...
Advisory: TotalECommerce (index.asp id) Remote SQL Injection Vulnerability.
--Security Report-- Advisory: TotalECommerce index.asp id Remote SQL Injection Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 04/03/06 04:36 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: TotalECommerce...
Updated Noah Classifieds Component for Joomla!/Mambo
Updated Noah Classifieds Component for Joomla!/Mambo fixes vulnerabilities Problem: Several vulnerabilities were recently discovered in Noah Classifieds 1.3 which also affect the Joomla!/Mambo component. Details on the vulnerabilities are available at http://www.kapda.ir/advisory-268.html The...
CVE-2006-0664
Cross-site scripting XSS vulnerability in configdefaultsinc.php in Mantis before 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An...
Linpha <= 1.0 multiple arbitrary local inclusion
------------- Linpha = 1.0 multiple arbitrary local inclusion ----------------- software: site: http://linpha.sourceforge.net/nuke/ description: " LinPHA is an easy to use, multilingual, flexible photo / image archive / album / gallery written in PHP. It uses a SQL database to store information...
CheesyBlog-1.0.txt
New eVuln Advisory: CheesyBlog XSS Vulnerability http://evuln.com/vulns/49/summary.html --------------------Summary---------------- Software: CheesyBlog Sowtware's Web Site: http://cheesepizza.net/ Versions: 1.0 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched...
[SA18459] PDFdirectory SQL Injection Vulnerabilities
TITLE: PDFdirectory SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18459 VERIFY ADVISORY: http://secunia.com/advisories/18459/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PDFdirectory 0.x http://secunia.com/product/6837/ DESCRIPTION: Some...
[Full-disclosure] SimpBook "message" Remote Cross-Site Scripting Vulnerability
Advisory 5 Title: SimpBook "message" Remote Cross-Site Scripting Vulnerability Author: 0ozeuso0 Contact: [email protected] Website: Elitemexico.org Date: 05/01/2006 Risk: High Vendor Url: http://codegrrl.com/scripts/simpbook/ Affected Software: SimpBook Non Affected: We Are: olimpus klan team...