webinsta.txt

+-------------------------------------------------------------------- + + WEBInsta Mailing list manager cabsolutepath 1.3e RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/+ WEBInstaMailinglistmanagercabsolutepath1.3eRFI.htm +...

sicherheit_83.txt

+-------------------------------------------------------------------- + + phpAutoMembersArea 3.2.5 $installedconfigfile Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: phpAutoMembersArea 3.2.5 + Venedor ...........:...

WEBInsta Mailing list manager (cabsolute_path) 1.3e RFI

+-------------------------------------------------------------------- + + WEBInsta Mailing list manager cabsolutepath 1.3e RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/+ WEBInstaMailinglistmanagercabsolutepath1.3eRFI.htm +...

Cwfm 0.9.1 - 'Language' Remote File Inclusion

+-------------------------------------------------------------------- + + Cwfm-0.9.1 Language Remote File Inclusion + + Original advisory: + + http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1LanguageRemoteFileInclusion.htm +...

phpAutoMembersArea 3.2.5 - 'installed_config_file' Remote File Inclusion

+-------------------------------------------------------------------- + + phpAutoMembersArea 3.2.5 $installedconfigfile Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: phpAutoMembersArea 3.2.5 + Venedor ...........:...

ME Download System 1.3 - header.php Remote File Inclusion

ME Download System 1.3 - header.php Remote File Inclusion +-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 ...

PHPAuction 2.1 (phpAds_path) Remote File Inclusion Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + PHPAuction 2.1 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: PHPAuction 2.1 maybe higher + Venedor ...........:...

TSEP 0.942 - copyright.php Remote File Inclusion

TSEP 0.942 - copyright.php Remote File Inclusion +-------------------------------------------------------------------- + + TSEP 0.9.4.2 + +-------------------------------------------------------------------- + + Affected Software .: TSEP 0.9.4.2 + Venedor ...........: http://www.tsep.info/ + Clas...

CVE-2006-3284

CVE-2006-3284 describes an XSS vulnerability in Dating Agent PRO 4.7.1. Affected component: login parameter in webmaster/index.php and search.php, enabling injection of arbitrary web script/HTML. The NVD entry records CVSSv2 base score 2.6 (LOW) with network attack, high complexity, no authentica...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 site, 3 city, 4 state, 5 country, and possibly 6 name fields, which are viewed via viewguest.cgi...

CVE-2006-2231

Multiple cross-site scripting XSS vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 site, 3 city, 4 state, 5 country, and possibly 6 name fields, which are viewed via viewguest.cgi...

Warcraft III Replay Parser Script Remote Command Exucetion Vulnerability And Cross-Site Scripting Attacking

Website : http://toya.net.pl/julas/w3g/ Version : 1.8c Description : Warcraft III Replay Parser for PHP? What is that? Maybe you know or maybe not that Warcraft III replay files .w3g have much information inside. Almost everything can be pulled out of them: players accounts, races, colours, heroe...

edmoBBS SQL inj. vuln.

edmoBBS SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/edmobbs-sql-inj-vuln.html Vendor:http://www.upyournet.com/edmobbs/index.php affected version: V0.9 and prior Product Description: edmoBBS is not a cluttered and complex board...

"Старый добрый" DForum

"Старый добрый" DForum 4пальца Удивительное дело, сообщество вебмастеров в интернете на редкость консервативно. Многие скрипты, которые были созданы в конце девяностых, до сих пор находят себе применение на самых разных сайтах. А старые скрипты - это старые болячки, как я писал в одной из статей...

[Full-disclosure] Statcounter Script Injection User Session Hijack

Statcounter Script Injection User Session Hijack Class Input Validation & Session Hijack Remote Local Published / Updated Yes Yes 04th May 2005 Vulnerable http://www.statcounter.com/ All users of websites using the statcounter services Not Vulnerable - Discussion Statcounter.com is one of the bes...

[HSC Security Group] Ocean12 Mailing List Manager Pro SQL injection

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : Ocean12 Mailing list manager PRO 1.06 Vendor: www.ocean12scripts.com Risk: High An sql injection allows anyone to login as admin using this sql query in the login panel: Adminid: Admin' UNI...

comersusv6.txt

--Alt-Boundary-27163.23868601 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Title: Comersus v6 Shopping Cart Sever Script injection Risk: High...

CVE-2003-1258

activate.php in versatileBulletinBoard vBB 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid...

xoops Quizz Module IMG bug

Author: Magistrat http://www.blocus-zone.com magistrat@blocus-zone com Date: 11/11/2002 Object: IMG bug in quizz module risk: Medium-high advisory url: http://www.blocus-zone.com/modules/news/article.php?storyid=180 ----------------------------------------------------- After having highlighted wi...

Macinosh IE file execuion vulerability

Problem: Malicious webmaster can execute files, if the victim is using Internet Explorer 5. Affected versions: IE 5.0, probably earlier, on Classic systemsbelow OS X Description: If you know the file path you can execute watever you want. What makes it difficult is that macintosh hard drives have...