CVE-2008-6224

CVE-2008-6224 describes a directory traversal in the Visualizza.php module of Way Of The Warrior (WOTW) up to version 5.0 and earlier. The flaw allows remote attackers to read arbitrary files by supplying a …/ (dot-dot) sequence in the plancia parameter. Public references indicate the vulnerabili...

CVE-2008-6223

PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior WOTW 5.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the plancia parameter to crea.php...

CVE-2008-6224: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in visualizza.php in Way Of The Warrior WOTW 5.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the plancia parameter...

CVE-2008-6223: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in visualizza.php in Way Of The Warrior WOTW 5.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the plancia parameter to crea.php...

Google Chrome 1.0.154.43 - Clickjacking

Google Chrome 1.0.154.43 - Clickjacking Application Name : Google Chrome Web Browser Vulnerable Type : Clickjacking Home : www.ozkanbozkurt.com Author : x0x x0x This function updateboxevt mouseX=evt.pageX?evt.pageX:evt.clientX; mouseY=evt.pageY?evt.pageY:evt.clientY;...

PHP-Fusion Mod the_kroax - SQL Injection

PHP-Fusion Mod thekroax commentid SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Author by : FasTWORM +home: Cyber-Warrior.Org +exploit:...

WSN Guest 1.23 SQL Injection

WSN Guest 1.23 search.php SQL Injection Vulnerability %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Author : DaiMon Homepage : http://www.cwdaimon.com Contact : cwdaimonatgmail.com...

WSN Guest 1.23 - Search SQL Injection

WSN Guest 1.23 - Search SQL Injection WSN Guest 1.23 search.php SQL Injection Vulnerability %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Author : DaiMon Homepage : http://www.cwdaimon.com Contact : cwdaimonatgmail.com...

ASPThai.Net Webboard 6.0 (bview.asp) SQL Injection Vulnerability

No description provided by source. ASPThai.Net Webboard 6.0bview.asp SQL Injection Vulnerability Autore: DaiMon Email: cwdaimon1gmail.com Site: http://www.cwdaimon.com Version: 6.0 Download: http://www.aspthai.net/detailcode.asp?Mode=Load&DID=7&Redirect=QUHG/UKCD/RREP/VZssGGYUkedWebLtksjudROM Bug...

wotw-lfirfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl wotw = 5.0 Local/Remote File Inclusion Vulnerability Script: "Way Of The Warrior is a web boardgame of fantasy battle..." Script...

wotw 5.0 - LocalRemote File Inclusion

wotw 5.0 - LocalRemote File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl wotw = 5.0 Local/Remote File Inclusion Vulnerability Script: "Way Of The Warrior is a web...

wotw <= 5.0 Local/Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================== wotw = 5.0 Local/Remote File Inclusion Vulnerability ===================================================== :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c...

wotw 5.0 - Local/Remote File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl wotw = 5.0 Local/Remote File Inclusion Vulnerability Script: "Way Of The Warrior is a web boardgame of fantasy battle..." Script...

Unfixed XSS vulnerability at www1.gemm.com

Security researcher cherokee warrior, has submitted on 28/07/2008 a cross-site-scripting XSS vulnerability affecting www1.gemm.com, which at the time of submission ranked 25923 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/07/2008. It is...

Unfixed XSS vulnerability at nafcu.com

Security researcher cherokee warrior, has submitted on 17/07/2008 a cross-site-scripting XSS vulnerability affecting nafcu.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/11/2008. It is currently...

Unfixed XSS vulnerability at www.icba.org

Security researcher cherokee warrior, has submitted on 17/07/2008 a cross-site-scripting XSS vulnerability affecting www.icba.org, which at the time of submission ranked 1077530 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/07/2008. It is...

Unfixed XSS vulnerability at search.dominican.edu

Security researcher cherokee warrior, has submitted on 26/06/2008 a cross-site-scripting XSS vulnerability affecting search.dominican.edu, which at the time of submission ranked 211149 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008...

Unfixed XSS vulnerability at www.csw.edu

Security researcher cherokee warrior, has submitted on 21/06/2008 a cross-site-scripting XSS vulnerability affecting www.csw.edu, which at the time of submission ranked 1584120 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2008. It is...

Unfixed XSS vulnerability at www.cwsl.edu

Security researcher cherokee warrior, has submitted on 21/06/2008 a cross-site-scripting XSS vulnerability affecting www.cwsl.edu, which at the time of submission ranked 878746 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is...

Unfixed XSS vulnerability at www.ccwu.org

Security researcher cherokee warrior, has submitted on 21/06/2008 a cross-site-scripting XSS vulnerability affecting www.ccwu.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2008. It is...