XZeroScripts XZero Community Classifieds 4.97.8 Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/35809/info XZeroScripts XZero Community Classifieds is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...

XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities

XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/35809/info XZeroScripts XZero Community Classifieds is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

XZeroScripts XZero Community Classifieds 4.97.8 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/35809/info XZeroScripts XZero Community Classifieds is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the brows...

XZeroScripts XZero Community Classifieds 本地文件包含漏洞

BUGTRAQ ID: 27041 CNCAN ID:CNCAN-2007122808 XZeroScripts XZero Community Classifieds是一款基于PHP的WEB应用程序。 XZeroScripts XZero Community Classifieds不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于脚本对用户提交的WEB参数缺少过滤，提交包含多个\"../\"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 XZeroScripts XZero Community...

XZeroScripts XZero Community Classifieds 'config.inc.php'远程文件包含漏洞

BUGTRAQ ID: 27040 CNCAN ID:CNCAN-2007122806 XZeroScripts XZero Community Classifieds是一款基于PHP的WEB应用程序。 XZeroScripts XZero Community Classifieds不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'config.inc.php'脚本对用户提交的'pathescape'参数缺少过滤，提交远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 XZeroScripts XZero...

XZeroScripts XZero Community Classifieds SQL注入漏洞

BUGTRAQ ID: 27042 CNCAN ID:CNCAN-2007122807 XZeroScripts XZero Community Classifieds是一款基于PHP的WEB应用程序。 XZeroScripts XZero Community Classifieds不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 XZeroScripts XZero Community...

XZero Community Classifieds 4.95.11 - Remote File Inclusion

XZero Community Classifieds 4.95.11 - Remote File Inclusion XZero Community Classifieds = v4.95.11 Remote File Inclusion linK : http://www.xzeroscripts.com download: http://rapidshare.com/files/66809648/XZCl4.95.11.rar cod3d and f0unded by Kw3rLn from Romanian Security Team a.K.A http://rstzone.o...