CVE-2006-5625

PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Management System WCMS 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cpath parameter...

Mambo/Joomla plugin.class.php脚本远程文件包含漏洞

Mambo（也被称为Joomla）是一款开放源代码的WEB内容管理系统。 Mambo在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 在Mambo的comcomprofiler文件夹的plugin.class.php脚本中： -----------------------plugin.class.php---------------------- ?php / Plugin handler @package Joomla @author various, JoomlaJoe and Beat / requireonce...

Shop-Script - Multiple HTTP Response Splitting Vulnerabilities

source: https://www.securityfocus.com/bid/20685/info Shop-Script is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is...

[Full-disclosure] Asbru HardCore Web Content Editor - Command Injection

n.runs GmbH http://www.nruns.com/ [email protected] n.runs-SA-2006.001 15-Oct-2006 Vendor: Asbru Software, http://asbrusoft.com Product: Asbru HardCore Web Content Editor, http://editor.asbrusoft.com/ Vulnerability: Command Injection Vendor communication: 2006/10/05 initial notification of...

CVE-2006-5258

The CVE concerns the spell-checking component in Asbru products: Web Content Management <6.1.22, Web Content Editor <6.0.22, and Website Manager

Sun Secure Global Desktop / Tarantella < 4.20.983 Multiple XSS

Sun Secure Global Desktop or Tarantella, a Java-based program for web-enabling applications running on a variety of platforms, is installed on the remote web server. According to the version reported in one of its scripts, the installation of the software on the remote host fails to sanitize...

NX5Linkx 1.0 - links.php HTTP Response Splitting

NX5Linkx 1.0 - links.php HTTP Response Splitting source: https://www.securityfocus.com/bid/20011/info NX5Linkx is prone to an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence...

NX5Linkx 1.0 - 'links.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/20011/info NX5Linkx is prone to an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cache...

TikiWiki file upload vulnerability (jhot.php)

Added: 09/08/2006 CVE: CVE-2006-4602 BID: 19819 OSVDB: 28456 Background TikiWiki is a multi-purpose web content management system written in PHP. Problem The jhot.php script allows remote attackers to upload arbitrary PHP commands into the img/wiki directory. The commands can then be executed by...

TikiWiki file upload vulnerability (jhot.php)

Added: 09/08/2006 CVE: CVE-2006-4602 BID: 19819 OSVDB: 28456 Background TikiWiki is a multi-purpose web content management system written in PHP. Problem The jhot.php script allows remote attackers to upload arbitrary PHP commands into the img/wiki directory. The commands can then be executed by...

DieselScripts Job Site - Forgot.php Multiple Cross-Site Scripting Vulnerabilities

DieselScripts Job Site - Forgot.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19622/info Multiple cross-site scripting vulnerabilities affect Job Site because the application fails to properly sanitize user-supplied input before including it in...

BlaBla 4U - Multiple Cross-Site Scripting Vulnerabilities

BlaBla 4U - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19513/info Multiple cross-site scripting vulnerabilities affect BlaBla 4U because the application fails to properly sanitize user-supplied input before including it in dynamically generated web...

BlaBla 4U - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/19513/info Multiple cross-site scripting vulnerabilities affect BlaBla 4U because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may leverage these issues to have...

YaBBSE 1.x - index.php Cross-Site Scripting

YaBBSE 1.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19460/info A cross-site scripting vulnerability affects YaBBSE because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may...

YaBBSE 1.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19460/info A cross-site scripting vulnerability affects YaBBSE because the application fails to properly sanitize user-supplied input before including it in dynamically generated web content. An attacker may leverage this issue to have arbitrary script co...

QuestCMS - main.php Remote File Inclusion

QuestCMS - main.php Remote File Inclusion !!!!!!!!!WWW.SÝBERSAVASCÝLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability --------------------------------------------------------------------------------...

Questcms Remote File Include Vulnerability

!!!!!!!!!WWW.SBERSAVASCLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct:...

QuestCMS - 'main.php' Remote File Inclusion

!!!!!!!!!WWW.SÝBERSAVASCÝLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Questcms Remote File Include Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct:...

QuestCMS (main.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================== QuestCMS main.php Remote File Include Vulnerability ===================================================== Title : Questcms Remote File Include Vulnerability...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security bugs in the mozilla package are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Seamonkey is an open source Web browser, advanced email and...