618 matches found
wowroster15x.txt
Title : WoW Roster = 1.5.x Remote File Include hsList.php Discovered By :::: AG-Spider ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger ----------------------------------------------------------------------------- dork : "wow...
VWar 1.5 - member.php?vwar_root Remote File Inclusion
VWar 1.5 - member.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an...
VWar 1.5 - stats.php?vwar_root Remote File Inclusion
VWar 1.5 - stats.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitra...
WoW Roster <= 1.5.x Remote File Include (hsList.php)
Title : WoW Roster = 1.5.x Remote File Include hsList.php Discovered By :::: AG-Spider ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger ----------------------------------------------------------------------------- dork : "wow...
Moskool 1.5 Component - Admin.Moskool.php Remote File Inclusion
Moskool 1.5 Component - Admin.Moskool.php Remote File Inclusion source: https://www.securityfocus.com/bid/19245/info Moskool is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote...
PHP Live Helper <= 1.x (abs_path) Remote File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote :...
V-Webmail <= 1.6.4 (pear_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== V-Webmail Vulnerable File v-webmail/includes/pear//.php = requireonce $CONFIG'peardir' . '.php'; v-webmail/includes/mailaccess/pop3.php = requireonce$CONFIG'peardir'...
Gphotos Directory Traversal and Cross Site Scripting
Details The first vulnerability issue is due to an input validation error in "index.php" "diapo.php" and "affich.php" scripts that do not validate "rep","image" variables, which may be exploited to cross site scripting attacks. http://traget/index.php?rep=xss http://traget/diapo.php?rep=xss...
DSA-1055-1 mozilla-firefox - programming error
Bulletin has no description...
security flaw
The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP...
Mozilla Thunderbird : Remote Code Execution & Denial of Service
Mozilla Thunderbird : Remote Code Execution & Denial of Service //----- Advisory Program : Mozilla Thunderbird Homepage : http://www.mozilla.com/thunderbird/ Tested version : = 1.0.7 Found by : nono2357 at sysdream dot com This advisory : nono2357 at sysdream dot com Discovery date : 2006/01/28...
[SA18714] DEV web management system "City/Region" Script Insertion
TITLE: DEV web management system "City/Region" Script Insertion SECUNIA ADVISORY ID: SA18714 VERIFY ADVISORY: http://secunia.com/advisories/18714/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: DEV web management system 1.x http://secunia.com/product/6685/...
QwikiWiki 1.5 - 'search.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16638/info QwikiWiki is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before including it in dynamically generated HTML content. An attacker may leverage this issu...
[SA15907] Mozilla Thunderbird Attachment Spoofing Vulnerability
TITLE: Mozilla Thunderbird Attachment Spoofing Vulnerability SECUNIA ADVISORY ID: SA15907 VERIFY ADVISORY: http://secunia.com/advisories/15907/ CRITICAL: Less critical IMPACT: Spoofing, System access WHERE: From remote SOFTWARE: Mozilla Thunderbird 1.x http://secunia.com/product/4652/ DESCRIPTION...
Dev Web Management System 1.5 - getfile.php?cat SQL Injection
Dev Web Management System 1.5 - getfile.php?cat SQL Injection source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev Web Management System...
Dev Web Management System 1.5 - add.php Multiple Cross-Site Scripting Vulnerabilities
Dev Web Management System 1.5 - add.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev We...
Dev Web Management System 1.5 - 'getfile.php?cat' SQL Injection
source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev Web Management System versions 1.5 and earlier are prone to these issues...
Dev Web Management System 1.5 - download_now.php?target SQL Injection
Dev Web Management System 1.5 - downloadnow.php?target SQL Injection source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev Web Management Syst...
Dev Web Management System 1.5 - 'add.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/16063/info Dev Web Management System is prone to multiple input validation vulnerabilities. These issues may allow SQL injection and cross-site scripting attacks. Dev Web Management System versions 1.5 and earlier are prone to these issues...
Dev Web Management System <= 1.5 (cat) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== Dev Web Management System this works regardless of magicquotesgpc setting usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Prohibit the taking of...