EUVD-2006-3257

Malware in sbrugna...

vlbook 1.21 (xss/lfi) Multiple Vulnerabilities

No description provided by source. vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi...

CVE-2008-2073

Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...

CVE-2008-2072

CVE-2008-2072 describes a Cross-site scripting (XSS) vulnerability in index.php of Virtual Design Studio vlbook 1.21, allowing remote attackers to inject arbitrary web script or HTML via the l parameter. The entry notes this is a different vector from CVE-2006-3260, and the affected component is ...

CVE-2008-2073

CVE-2008-2073 describes a directory traversal vulnerability in the file include/global.inc.php of Virtual Design Studio vlbook 1.21 . The underlying issue allows an attacker to supply a value for the parameter l containing “..” to cause the application to include and execute arbitrary local files...

CVE-2008-2072

Cross-site scripting XSS vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260...

CVE-2008-2072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260...

CVE-2008-2073: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...

vlBook 1.21 (ALL VERSION)

---------------------------------------------------------------- Script : vlBook 1.21 ALL VERSION Type : Multiple Remote Vulnerabilities LFI/XSS ---------------------------------------------------------------- Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani...

vlBook 1.21 (XSS/LFI) Multiple Remote Vulnerabilities

No description provided by source. vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani &nb...

vlBook 1.21 (XSS/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== vlBook 1.21 XSS/LFI Multiple Remote Vulnerabilities ===================================================== vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRAS...

Vlbook 1.21 - Cross-Site Scripting Local File Inclusion

Vlbook 1.21 - Cross-Site Scripting Local File Inclusion vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashay...

vlbook-lfixss.txt

vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Raso...

Vlbook 1.21 - Cross-Site Scripting / Local File Inclusion

vlBook 1.21 ALL VERSION Multiple Remote Vulnerabilities LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Raso...

CVE-2006-3260

Cross-site scripting XSS vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2006-3260

CVE-2006-3260 affects vlbook 1.02. The vulnerability is a Cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary web script or HTML via the message parameter. No remediation details are provided in the supplied documents; exploitation information is not pres...

CVE-2006-3260

Cross-site scripting XSS vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2006-3260: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

vlBookXSS.txt

vlBook 1.02 Advisory ==================== Date: ----- 2005 June 23 Product: -------- vlBook 1.02 © 2005 Vendor: ------- http://vlab.info/ Descriptions: ------------- The vlbook is a free, open source and light-weight guestbook written in PHP using flat files to store messages and settings. It com...

vlbook 1.2 XSS Attack

vlBook 1.02 Advisory ==================== Date: ----- 2005 June 23 Product: -------- vlBook 1.02 © 2005 Vendor: ------- http://vlab.info/ Descriptions: ------------- The vlbook is a free, open source and light-weight guestbook written in PHP using flat files to store messages and settings. It com...