CGA-8XHP-794R-624P

Bulletin has no description...

EUVD-2006-1375

Malware in sbrugna...

EUVD-2006-4738

Malware in sbrugna...

XhP CMS 0.5.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting Exploit Author: Ahsan Tahir Date: 19-10-2016 Software Link: https://sourceforge.net/projects/xhp/ Vendor: https://sourceforge.net/projects/xhp/ Google Dork: inurl:Powered by XHP CMS Contact:...

XhP CMS 0.5.1 - Cross-Site Request Forgery Persistent Cross-Site Scripting

XhP CMS 0.5.1 - Cross-Site Request Forgery Persistent Cross-Site Scripting Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting Exploit Author: Ahsan Tahir Date: 19-10-2016 Software Link: https://sourceforge.net/projects/xhp/ Vendor:...

XhP CMS 0.5.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting Exploit Author: Ahsan Tahir Date: 19-10-2016 Software Link: https://sourceforge.net/projects/xhp/ Vendor: https://sourceforge.net/projects/xhp/ Google Dork: inurl:Powered by XHP CMS Contact:...

XhP CMS 0.5.1 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting Exploit Author: Ahsan Tahir Date: 19-10-2016 Software Link: https://sourceforge.net/projects/xhp/ Vendor: https://sourceforge.net/projects/xhp/ Google...

XHP CMS 0.5.1 Index.PHP Cross-Site Scripting Vulnerability

No description provided by source...

XHP CMS <= 0.5 (upload) Remote Command Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo XHP CMS = 0.5 remote cmmnds xctn\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo dork: \powered by XHP CMS\r\n\r\n; if $argc4 echo Usage: php .$argv0. host path cmd...

XSS Vulnerability in Facebook Translations !

Summary The Facebook Translations tool's search feature was vulnerable to a simple reflected XSS attack. How did it work? The Translations tool allows users to perform phrase searches within translations. In this case, when a search query returned 0 results, the script displayed a message "Your...

XHP CMS <= 0.5 File Upload Vulnerability

XHP CMS is prone to a file upload vulnerability. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XHP CMS Version <= 0.5 File Upload Vulnerability

The remote webserver is hosting a PHP script which is vulnerable to a unrestricted file upload flaw. Description : XHP CMS is installed on the remote system. The installed application does not authenticate users to access the FileManager scripts located at:...

CVE-2006-4752

Laurentiu Matei eXpandable Home Page XHP CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter...

CVE-2006-4752

Laurentiu Matei eXpandable Home Page XHP CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter...

CVE-2006-4752

The CVE-2006-4752 entry affects Laurentiu Matei’s eXpandable Home Page (XHP) CMS 0.5.1. The vulnerability arises in the engine module where an invalid action parameter allows remote attackers to obtain the installation path. No exploit details or specific versions beyond 0.5.1 are provided in the...

CVE-2006-4751

CVE-2006-4751 affects Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1. The vulnerability is a Cross-Site Scripting (XSS) in index.php via the errcode parameter, resulting from unsanitized input that allows remote attackers to inject arbitrary web script or HTML. Documented impact per CVSS in...

CVE-2006-4751: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Laurentiu Matei eXpandable Home Page XHP CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the errcode parameter...

xhpXSS.txt

Hello,, XHP CMS v0.5.1 Vuls Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Xss index.php?errcode=alertdocument.cookie; Full path action.php?action=1&module=engine...

CVE-2006-4752: Undefined Security Weakness

Laurentiu Matei eXpandable Home Page XHP CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter...

XHP CMS 0.5.1 - index.php Cross-Site Scripting

XHP CMS 0.5.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19948/info XHP CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based...