899 matches found
CVE-2002-2129
CVE-2002-2129 : Cross-site scripting (XSS) in editform.php of w-Agora 4.1.5. The vulnerability occurs when an arbitrary form field name containing script is echoed back during form display, allowing remote script execution in the user’s browser. The provided documents describe the affected softwa...
CVE-2002-2129
Cross-site scripting vulnerability XSS in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arbitrary form field name containing the script, which is echoed back to the user when displaying the form...
CVE-2002-2128
CVE-2002-2128 affects editform.php in w-Agora 4.1.5, enabling local users to run arbitrary PHP code via .. sequences in the file parameter (path traversal). Documented by NVD and Red Hat/CVE listings; CVSSv2 base score 4.6 (LOCAL access, LOW attack complexity, PARTIAL confidentiality/integrity/av...
CVE-2002-2128
editform.php in w-Agora 4.1.5 allows local users to execute arbitrary PHP code via .. dot dot sequences in the file parameter...
W-Agora 'file' Parameter Directory Traversal Vulnerability
W-Agora is prone to directory traversal attacks. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:w-agora:w-agora"; ifdescriptio...
[SA17201] W-Agora Local File Inclusion and File Upload Vulnerabilities
TITLE: W-Agora Local File Inclusion and File Upload Vulnerabilities SECUNIA ADVISORY ID: SA17201 VERIFY ADVISORY: http://secunia.com/advisories/17201/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: W-Agora 4.x...
w-Agora <= 4.2.0 Multiple Vulnerabilities
The version of w-Agora installed on the remote host fails to validate files uploaded with the 'browseavatar.php' and 'insert.php' scripts, which allows an attacker to upload scripts with arbitrary PHP code and then to execute it subject to the privileges of the web server user id. In addition, it...
wagora420_xpl.txt
W-agora 4.2.0 Remote code execution / cross site scripting poc exploit software: site: http://w-agora.net/en/index.php description: "W-Agora is a web publishing and forum software. It allows you and your visitors to store and display messages, files, share discussions and other information on you...
w-Agora <= 4.2.0 (quicklist.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================== w-Agora = 4.2.0 quicklist.php Remote Code Execution Exploit ============================================================== ?php --- wagora420xpl.php 13.33 14/10/2005 W-Agora...
w-Agora <= 4.2.0 (quicklist.php) Remote Code Execution Exploit
No description provided by source. ?php --- wagora420xpl.php 13.33 14/10/2005 W-Agora 4.2.0 possibly prior versions Remote commands execution through quicklist.php and/or upload features by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this...
CVE-2005-2648
Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary files via the site parameter...
w-Agora index.php site Parameter Traversal Arbitrary File Access
The remote host is running w-agora, a web-based forum application written in PHP. The remote version of this software is prone to directory traversal attacks. A remote attacker could request a specially crafted URL to read arbitrary files on the remote system with the privileges of the web server...
CVE-2005-2648
W-Agora is affected by CVE-2005-2648: a directory traversal in index.php via the site parameter allows remote reading of arbitrary files on affected versions (W-Agora 4.2.0 and earlier). OpenVAS/Nessus entries corroborate this vulnerability and indicate remediation by upgrading to a fixed release...
CVE-2005-2648
Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary files via the site parameter...
wagora240.txt
w-agora 4.2.0 and prior Remote Directory Travel Vulnerability SEVERITY: ========= High SOFTWARE: ========= w-agora 4.2.0 http://w-agora.net INFO: ===== w-agora is a web publishing and forum software. It allows you and your visitors to store and display messages, files, share discussions and other...
w-agora 4.2.0 and prior Remote Directory Travel Vulnerability
w-agora 4.2.0 and prior Remote Directory Travel Vulnerability SEVERITY: ========= High SOFTWARE: ========= w-agora 4.2.0 http://w-agora.net INFO: ===== w-agora is a web publishing and forum software. It allows you and your visitors to store and display messages, files, share discussions and other...
W-Agora < 4.2.1 index.php site Parameter Traversal Arbitrary File Access
Binary data 3171.prm...
W-Agora 4.2 - 'Site' Directory Traversal
source: https://www.securityfocus.com/bid/14597/info W-Agora is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An unauthorized user can retrieve arbitrary files by supplying directory traversal strings '../...
CVE-2002-1878
W-Agora 4.1.3 is affected by a PHP remote file inclusion vulnerability (CVE-2002-1878) via the inc_dir parameter. The root cause is lack of sanitization of user-supplied data, enabling a remote attacker to execute arbitrary PHP code on the affected system. Exploitation details are not provided in...
W-Nailer 0.34
случайно обнаружыл искал уязвимости на чужом сайте уязвимость в W-Nailer 0.34. Разработчик - http://wnailer.vddh.com/ Узвимость: в файле scripts/thumb.php не проверяется file, в итоге - возможность просмотра любых файлоф на сайте, при просмотре превьюшек типа шелла что-то Пример:...