1024 matches found
NewsOffice 1.1 Remote File Inclusion Vulnerability
No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : NewsOffice 1.1 Remote File Include Vulnerabilitiy Download From : http://www.newanz.com/applications/NewsOffice/?page=download Found By : RoMaNcYxHaCkEr...
mcGallery 1.1 - 'detail.php?lang' Cross-Site Scripting
source: https://www.securityfocus.com/bid/28587/info mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...
mcGallery 1.1 - resize.php?lang Cross-Site Scripting
mcGallery 1.1 - resize.php?lang Cross-Site Scripting source: https://www.securityfocus.com/bid/28587/info mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...
PT-2008-2812 · Kutubisitte · Kutub-I Sitte
Name of the Vulnerable Software and Affected Versions: Kutub-i Sitte KutubiSitte version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the kid parameter in a hadisgoster action to modules.php. Recommendations: For Kutub-i Sitt...
Yap Blog 1.1 - 'index.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/28120/info Yap Blog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...
Debian Security Advisory DSA 094-1 (mailman)
The remote host is missing an update to mailman announced via advisory DSA 094-1. OpenVAS Vulnerability Test $Id: deb0941.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 094-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Zenphoto 'rss.php' SQL Injection Vulnerability
Zenphoto is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
Neuron Blog Admin Permission Bypass and Remote File Upload Vulnerability
Neuron Blog Admin Permission Bypass and Remote File Upload Vulnerability ------------------------------------------------------------------------ Script : Neuron Blog Version : 1.1 Site : http://dev.localhost.be/?q=detail-script&id=11 Founder : Rizgar Contact : [email protected] and...
fileup-rfi.txt
File Uploader Version 1.1 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : File Uploader Version Version : 1.1 Site : http://www.mapos-scripts.de Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack...
File Uploader Version 1.1 Remote Command Execution Vulnerability
File Uploader Version 1.1 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : File Uploader Version Version : 1.1 Site : http://www.mapos-scripts.de Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack...
File Uploader 1.1 - 'index.php?config[root_ordner]' Remote File Inclusion
source: https://www.securityfocus.com/bid/25253/info File Uploader is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
Hunkaray Okul Portali 1.1 - Duyuruoku.asp SQL Injection
Hunkaray Okul Portali 1.1 - Duyuruoku.asp SQL Injection source: https://www.securityfocus.com/bid/25185/info Hunkaray Okul Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
PT-2007-3531 · Eba News · Eba News
Name of the Vulnerable Software and Affected Versions: Eba News version 1.1 Description: A remote file inclusion issue in the admin/public/webpages.php file allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. Recommendations: For Eba News version 1.1, avoid...
Free File Hosting System 1.1 - 'contact.php?AD_BODY_TEMP' Remote File Inclusion
source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...
Free File Hosting System 1.1 - 'login.php?AD_BODY_TEMP' Remote File Inclusion
source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...
Free File Hosting System 1.1 - 'register.php?AD_BODY_TEMP' Remote File Inclusion
source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...
local Calendar System v1.1 (lcStdLib.inc) Remote File Include
+------------------------------------------------------------------------------------------- local Calendar System v1.1 lcStdLib.inc Remote File Include TrZiNDaN [email protected] Turkey -------------------------------------------------------------------------------------------- download :...
AIDeX Mini-WebServer 1.1 - Remote Crash (Denial of Service)
AIDeX Mini-WebServer 1.1 - Remote Crash Denial of Service import socket print "---------------------------------------------------------------------" print " AID'eX Mini-Webserver Verion 1.1 early Release 3 Denial of Service" print " url: http://www.aidex.de/software/webserver/" print " author:...
CVE-2006-6247
Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter to 1 slideshow.asp or 2 thumbnails.asp...
[Xss] IN SMF 1.1 RC2
InFo ----- Site : www.simplemachines.org Dork : Powered by SMF 1.1 RC2 File : index.php? By : b0rizQ E-Mail : TheFreEKernEl at b0rizQ dot nET email concealed -------------------------------- Xss www.traget.com/index.php?action=login2"scriptalert'xss-by-b0rizQ' /script...