158 matches found
CVE-2006-5421
WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that points to an avatar image that contains PHP code, which is then accessed from prestart.php. NOTE: this issue has been labeled remote file inclusion, but tha...
CVE-2006-5421
CVE-2006-5421 affects WSN Forum 1.3.4 and earlier. The vulnerability arises when a modified pathname in the pathtoconfig parameter points to an avatar image containing PHP code, which is then accessed by prestart.php, allowing remote attackers to execute arbitrary PHP code. The underlying issue i...
CVE-2006-5324
The Web Services Notification WSN security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374...
CVE-2006-5324
The CVE-2006-5324 affects IBM WebSphere Application Server’s Web Services Notification (WSN) component prior to version 6.1.0.2. The vulnerability allows an unauthenticated attacker to obtain unspecified access without providing a username and password (PK28374). The issue is network-accessible w...
WSN Forum <= 1.3.4 (prestart.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =============================================================== WSN Forum = 1.3.4 prestart.php Remote Code Execution Exploit =============================================================== !/usr/bin/php -q -d shortopentag=on ? print '...
WSN Forum 1.3.4 - prestart.php Remote Code Execution
WSN Forum 1.3.4 - prestart.php Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::...
WSN Forum <= 1.3.4 (prestart.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...
WSN Forum 1.3.4 - 'prestart.php' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
XSS in WSN Links 2.56
WSN Links 2.56 Home Page: http://scripts.webmastersite.net/wsnlinks/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting http://links.allmoney.ws/memberlist.php?field=&ascdesc=&page=3&perpage=14"scriptalert/script"...
CVE-2005-3939
CVE-2005-3939 describes multiple SQL injection vulnerabilities in the WSN Knowledge Base 1.2.0 and earlier. The flaws allow remote attackers to execute arbitrary SQL commands via parameters in displaycat (catid, perpage, ascdesc, orderlinks) and via the id parameter in comments.php and memberlist...
CVE-2005-3939
Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 perpage, 3 ascdesc, and 4 orderlinks in a displaycat action in a index.php; and the 5 id parameter in b comments.php and c memberlist.php...
CVE-2005-3939
Multiple SQL injection vulnerabilities in WSN Knowledge Base 1.2.0 and earler allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 perpage, 3 ascdesc, and 4 orderlinks in a displaycat action in a index.php; and the 5 id parameter in b comments.php and c memberlist.php...
CVE-2005-3916
SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action...
CVE-2005-3916
SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action...
CVE-2005-3916
CVE-2005-3916 describes an SQL injection vulnerability in the memberlist.php component of WSN Forum 1.21. The flaw allows remote attackers to inject arbitrary SQL commands through the id parameter used in a profile action, enabling potential data disclosure or modification. Affected software is W...
WSN Knowledge Base 1.2 - comments.php?id SQL Injection
WSN Knowledge Base 1.2 - comments.php?id SQL Injection source: https://www.securityfocus.com/bid/15656/info WSN Knowledge Base is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQ...
WSN Knowledge Base 1.2 - 'index.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/15656/info WSN Knowledge Base is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...
WSN Forum "id" SQL Injection Vulnerability
WSN Forum "id" SQL Injection Vulnerability Vuln. dicovered by : r0t Orginal advisory:http://pridels.blogspot.com/2005/11/wsn-forum-id-sql-injection.html Vendor:http://www.wsnforum.com/ affected version:1.21 and maybe prior versions. Vuln Description: Input passed to the "id" parameter in...