February 2007 Archives by thread

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...

Starting: Thu Feb 1 09:52:47 EDT 2007
Ending: Wed Feb 28 14:39:36 EDT 2007
Messages: 140

• [VIM] False: drake_0.2.10 => (d_root) Remote File Include Exploit   str0ke
• [VIM] False: Linx <= 1.0 (base_admin_path) Remote File Include Vulnerability   str0ke
• [VIM] true but: SIPS <= 0.3.1(box.inc.php) Remote File Include Vulnerability   str0ke
  • [VIM] true but: SIPS <= 0.3.1(box.inc.php) Remote File Include Vulnerability   Steven M. Christey
  • [VIM] true but: SIPS <= 0.3.1(box.inc.php) Remote File Include Vulnerability   Steven M. Christey
• [VIM] true: phpEventMan RFI Vuln.   str0ke
• [VIM] True: Somery 0.4.6 (skindir install.php) Remote file include   str0ke
• [VIM] true: Epistemon 1.0 <= Remote File Include Vulnerability   str0ke
• [VIM] true: WebBuilder <= 2.0 Remote File Include Vulnerability   str0ke
  • [VIM] PHP interpreter problems and blaming the victim - GLOBALS etc.   Steven M. Christey
• [VIM] Fwd: php web portail [remote file include & local file include]   str0ke
  • [VIM] Local File Inclusion inconclusive in PwP (was Fwd: php web portail [remote file include & local fileinclude])   Heinbockel, Bill
    • [VIM] Local File Inclusion inconclusive in PwP (was Fwd: php web portail [remote file include & local fileinclude])   str0ke
• [VIM] false: calendar = Remote File Include Vulnerability   str0ke
• [VIM] false: phpoll-1.1 <= Remote File Include Vulnerability   str0ke
• [VIM] true: DreamStats V 4.2=(index.php)=>Remote File Include   str0ke
• [VIM] true: Flipper Poll v1.1.0 (poll.php) RFI Vuln.   str0ke
  • [VIM] true: Flipper Poll v1.1.0 (poll.php) RFI Vuln.   Ferdy Riphagen
• [VIM] false: MySpeach v3.0.6 Remote File Inclusion   str0ke
• [VIM] FALSE: PHP LIGHTNING PORTAL (PLP) v.2.0 Remote File Inclusion   str0ke
• [VIM] Fwd: ACGV Comment 1.0   str0ke
• [VIM] true: phpBB ezBoard converter 0.2 (ezconvert_dir) Remote File Include Exploit   str0ke
• [VIM] phpBB++ Build 100 (phpbb_root_path) Remote File Include Exploit   str0ke
• [VIM] FLIP SQL injection clarification   Steven M. Christey
• [VIM] true: Categories hierarchy class_template.php RFI   Steven M. Christey
• [VIM] true w/caveat: GeekLog glConf[path_libraries] RFI   Steven M. Christey
• [VIM] false: PhotoStand (plugins.php) Remote File Include Vuln.   str0ke
  • [VIM] false: PhotoStand (plugins.php) Remote File Include Vuln.   Steven M. Christey
    • [VIM] false: PhotoStand (plugins.php) Remote File Include Vuln.   str0ke
• [VIM] true: agermenu   str0ke
• [VIM] false: Phpwebsite 1.0.0 File İnclude Vulnerability   str0ke
• [VIM] false: OpenBiblio <= 0.5.2(localize.php) Remote File Include Vulnerabilities   str0ke
• [VIM] false: WebMatic 2.5 Remote File Include Vulnerability   str0ke
• [VIM] true: WebMatic 2.6 RFI   str0ke
• [VIM] false: Agermenu 0.03   str0ke
  • [VIM] false: Agermenu 0.03   Steven M. Christey
    • [VIM] false: Agermenu 0.03   str0ke
• [VIM] true: months-old CentiPaid absolute_path RFI   Steven M. Christey
• [VIM] true: Agermenu 0.03   str0ke
  • [VIM] true: Agermenu 0.03   Steven M. Christey
    • [VIM] true: Agermenu 0.03   str0ke
• [VIM] false: News-Maniac Remote File Include Vulnerability   str0ke
• [VIM] false: Tritanium Bulletin Board 2 version #2005-05-02-18-17-06 Remote File Inclusion Exploit   str0ke
• [VIM] FreeRADIUS dispute of CVE-2007-0080   Steven M. Christey
• [VIM] CVE dispute - old Somery team.php RFI   Steven M. Christey
• [VIM] false: drakecms 0.3.2beta (header.php) Remote File Inclusion Vulnerability   str0ke
• [VIM] true: [Full-disclosure] Arbitrary file disclosure vulnerability in php rrd browser < 0.2.1 (prb)   Noam Rathaus
• [VIM] true: Inertia News Remote File &#304;nclude   Noam Rathaus
  • [VIM] true: Inertia News Remote File &#304;nclude   str0ke
    • [VIM] true: Inertia News Remote File &#304;nclude   Gadi Evron
      • [VIM] true: Inertia News Remote File &#304;nclude   str0ke
      • [VIM] true: Inertia News Remote File &#304;nclude   Steven M. Christey
      • [VIM] true: Inertia News Remote File &#304;nclude   Gadi Evron
• [VIM] true: AT Contenator <= v1.0 (Root_To_Script) Remote File Include Exploit   str0ke
• [VIM] false: paNews 2.0b4 < = RFi Vulnerabilities   str0ke
• [VIM] Some bl4ck Advisories are site-specific   Heinbockel, Bill
• [VIM] Verified: dot in Miniwebsvr 0.0.6   Heinbockel, Bill
• [VIM] false: Tell A Friend Script 2.8 Remote File Include Vulnerability   str0ke
• [VIM] Tuesday flood   Steven M. Christey
  • [VIM] Tuesday flood   Gadi Evron
  • [VIM] Tuesday flood   Aviram Jenik
    • [VIM] Tuesday flood   security curmudgeon
      • [VIM] Tuesday flood   Gadi Evron
      • [VIM] Tuesday flood   Steven M. Christey
      • [VIM] Tuesday flood   Gadi Evron
      • [VIM] Tuesday flood   security curmudgeon
      • [VIM] Tuesday flood   Aviram Jenik
      • [VIM] Tuesday flood   Mark J Cox
• [VIM] false: old Develooping Flash Chat RFI   Steven M. Christey
• [VIM] false: old Jobline RFI   Steven M. Christey
• [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Steven M. Christey
  • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Sullo
    • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Sullo
  • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Aviram Jenik
    • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Steven M. Christey
      • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Steve Tornio
      • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Steven M. Christey
      • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Sullo
      • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Steve Tornio
      • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Steven M. Christey
      • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Justin Seitz
      • [VIM] Vendor dispute - CVE-2006-1050 (Kwik-Pay)   Gadi Evron
• [VIM] [OT] Beers in Virginia   Aviram Jenik
  • [VIM] [OT] Beers in Virginia   Steven M. Christey
• [VIM] Sigh   J. M. Seitz
• [VIM] RSSMini Exploit -- Probably Not   George A. Theall
  • [VIM] RSSMini Exploit -- Probably Not   str0ke
  • [VIM] RSSMini Exploit -- Probably Not   Steven M. Christey
    • [VIM] RSSMini Exploit -- Probably Not   George A. Theall
• [VIM] Drupal Preview Comments Remote Code Execution Vulnerability   George A. Theall
  • [VIM] Drupal Preview Comments Remote Code Execution Vulnerability   str0ke
• [VIM] re Drupal Preview Comments Remote Code Execution Vulnerability (fwd)   rkeith at securityfocus.com
• [VIM] [milw0rm] exploit 3305   str0ke
• [VIM] affected versions for old MySQL ALTER TABLE (CVE-2004-0835)   Steven M. Christey
• [VIM] [OSVDB Mods] [Change Request] 23617: Kwik-Pay Payroll KwikPay.mdb Information Disclosure   Steve Tornio
• [VIM] PBLang 4.60 <= (index.php) Remote File Include Vulnerability   George A. Theall
• [VIM] false: Plume CMS 1.2.2 < = RFi Vulnerabilities   Stuart Moore
• [VIM] false: Drake CMS v0.3.2 < = RFi Vulnerabilities   George A. Theall
• [VIM] false: DotClear v1.2.5   Brent Graveland
• [VIM] 26226: abarcar Realty Portal content.php cat Variable SQL Injection (fwd)   security curmudgeon
• [VIM] [True] Meganoide's news v1.1.1 < = RFi Vulnerabilities   Noam Rathaus
  • [VIM] [True] Meganoide's news v1.1.1 < = RFi Vulnerabilities   str0ke
• [VIM] [TRUE] CedStat v1.31 XSS   Noam Rathaus
• [VIM] [unsure] MediaWiki Cross-site Scripting   Noam Rathaus
  • [VIM] [unsure] MediaWiki Cross-site Scripting   Sullo
    • [VIM] [unsure] MediaWiki Cross-site Scripting   Sullo
• [VIM] false: phpXmms 1.0 (tcmdp) Remote File Include Vulnerabilities   str0ke
• [VIM] false: Openads-2.3.31-alpha-pr2 (lib-ftp.inc.php) Remot File Include   str0ke
• [VIM] false: Simpleshout sboard.php Remote File Inclusion   str0ke
• [VIM] CVE-2006-5823 (zlib_inflate): Alternate Vectors?   Matthew Murphy
  • [VIM] CVE-2006-5823 (zlib_inflate): Alternate Vectors?   Gadi Evron
• [VIM] Vendor dispute for Animated Smiley Generator RFI (CVE-2006-6541)   security curmudgeon
  • [VIM] Vendor dispute for Animated Smiley Generator RFI (CVE-2006-6541)   Steven M. Christey
    • [VIM] Vendor dispute for Animated Smiley Generator RFI (CVE-2006-6541)   security curmudgeon
    • [VIM] Vendor dispute for Animated Smiley Generator RFI (CVE-2006-6541)   Gadi Evron
• [VIM] Source verify and clarification of old bookmark4u SQL injection   Steven M. Christey
• [VIM] [true] phpTrafficA-1.4.1 Local File Inclusion   Noam Rathaus
• [VIM] [TRUE] Call Center Software - Remote Xss Post Exploit -   Noam Rathaus
• [VIM] [TRUE] Nabopoll Blind SQL Injection vulnerabilies   Noam Rathaus
• [VIM] [TRUE] Nabopoll Blind SQL Injection vulnerabilies (Confirmed)   Noam Rathaus
• [VIM] "Phil's Bookmark" looks, smells site-specific   Steven M. Christey
• [VIM] Nomadic IBM APAR's   Steven M. Christey
  • [VIM] Nomadic IBM APAR's   security curmudgeon
• [VIM] Verisign ConfigChk ActiveX Overflow(s)   George A. Theall
  • [VIM] Verisign ConfigChk ActiveX Overflow(s)   Steven M. Christey
    • [VIM] Verisign ConfigChk ActiveX Overflow(s)   Stuart Moore
• [VIM] CVE-2007-0392 Dispute   security curmudgeon
• [VIM] [OSVDB Mods] OSVDB: Comment Awaiting Moderation   security curmudgeon
• [VIM] [OSVDB Mods] Re: Lame Gimmicks (fwd)   security curmudgeon
• [VIM] Vendor ACK for CVE-2006-3832 (loudblog SQL injection)   Steven M. Christey
• [VIM] OT: Humor - Vulnerability News Spoof   security curmudgeon
  • [VIM] OT: Humor - Vulnerability News Spoof   str0ke
• [VIM] IBM ISS 2006 Threat Review   security curmudgeon
  • [VIM] IBM ISS 2006 Threat Review   Steven M. Christey
    • [VIM] IBM ISS 2006 Threat Review   Mark J Cox
• [VIM] Verified: arabhost function.php RFI   Heinbockel, Bill
  • [VIM] Verified: arabhost function.php RFI   str0ke
    • [VIM] Verified: arabhost function.php RFI   Heinbockel, Bill
• [VIM] WebMplayer "eval injection" is actually OS command injection   Steven M. Christey
• [VIM] AdMentor SQL injection Exploit (dupe of CVE-2007-0575)   Heinbockel, Bill

Last message date: Wed Feb 28 14:39:36 EDT 2007
Archived on: Wed Feb 28 14:39:38 EDT 2007

• Messages sorted by: [ subject ] [ author ] [ date ]
• More info on this list...