EUVD-2006-3257

Malware in sbrugna...

vlbook 1.21 (xss/lfi) Multiple Vulnerabilities

No description provided by source. vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi...

CVE-2008-2073

Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...

CVE-2008-2072

Cross-site scripting XSS vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260...

CVE-2008-2072

CVE-2008-2072 describes a Cross-site scripting (XSS) vulnerability in index.php of Virtual Design Studio vlbook 1.21, allowing remote attackers to inject arbitrary web script or HTML via the l parameter. The entry notes this is a different vector from CVE-2006-3260, and the affected component is ...

CVE-2008-2073

CVE-2008-2073 describes a directory traversal vulnerability in the file include/global.inc.php of Virtual Design Studio vlbook 1.21 . The underlying issue allows an attacker to supply a value for the parameter l containing “..” to cause the application to include and execute arbitrary local files...

vlBook 1.21 (ALL VERSION)

---------------------------------------------------------------- Script : vlBook 1.21 ALL VERSION Type : Multiple Remote Vulnerabilities LFI/XSS ---------------------------------------------------------------- Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani...

vlBook 1.21 (XSS/LFI) Multiple Remote Vulnerabilities

No description provided by source. vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani &nb...

vlbook-lfixss.txt

vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Raso...

Vlbook 1.21 - Cross-Site Scripting Local File Inclusion

Vlbook 1.21 - Cross-Site Scripting Local File Inclusion vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashay...

vlBook 1.21 (XSS/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== vlBook 1.21 XSS/LFI Multiple Remote Vulnerabilities ===================================================== vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRAS...

Vlbook 1.21 - Cross-Site Scripting / Local File Inclusion

vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Raso...

CVE-2006-3260

Cross-site scripting XSS vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2006-3260

CVE-2006-3260 affects vlbook 1.02. The vulnerability is a Cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary web script or HTML via the message parameter. No remediation details are provided in the supplied documents; exploitation information is not pres...

CVE-2006-3260

Cross-site scripting XSS vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

vlBookXSS.txt

vlBook 1.02 Advisory ==================== Date: ----- 2005 June 23 Product: -------- vlBook 1.02 © 2005 Vendor: ------- http://vlab.info/ Descriptions: ------------- The vlbook is a free, open source and light-weight guestbook written in PHP using flat files to store messages and settings. It com...

vlbook 1.2 XSS Attack

vlBook 1.02 Advisory ==================== Date: ----- 2005 June 23 Product: -------- vlBook 1.02 © 2005 Vendor: ------- http://vlab.info/ Descriptions: ------------- The vlbook is a free, open source and light-weight guestbook written in PHP using flat files to store messages and settings. It com...

vlbook 1.2 XSS Attack

Hi, I found a bug in vlbook 1.2. Here you will find my original advisory: http://colander.altervista.org/advisory/vlbook.txt Best Regards, Omni -- Email.it, the professional e-mail, gratis per te: http://www.email.it/f Sponsor: Problemi di Liquidit? Con Logos Finanziaria 30.000 € in 24 ore a...

vlbook10.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 005 ------------------------------------------------------ Date - 10/2005 vlbook Remote File Inclusion AFFECTED PRODUCTS ================= vlbook 1.0 Guestbook http://vlbook.com/ OVERVIEW ======== he vlbook is a free,...