OSVDB: Open Sourced Vulnerability Database

Creditee: kurdish hackers team

Known Contact Information:

(as of 2011-04-11)

Known Affiliations:

Kurd-Team (as of 2011-04-11)

Disclosed Vulnerabilities (16):

Disc. Date	OSVDB ID	Title
2012-10-08	86181	Icy Phoenix contact_us.php subject Parameter XSS
2011-09-28	76779	Magtrb MyNews includes/tiny_mce/plugins/filemanager/classes/FileManager/FileSystems/ZipFileImpl.php basename Parameter Remote File Inclusion
2011-09-28	76780	Magtrb MyNews includes/tiny_mce/plugins/filemanager/classes/FileManager/FileManagerPlugin.php basename Parameter Remote File Inclusion
2011-09-28	76783	Magtrb MyNews includes/tiny_mce/plugins/filemanager/classes/FileSystems/RootFileImpl.php basename Parameter Remote File Inclusion
2011-09-28	76781	Magtrb MyNews includes/tiny_mce/plugins/imagemanager/classes/ImageManager/ImageManagerPlugin.php basename Parameter Remote File Inclusion
2011-09-28	76782	Magtrb MyNews includes/tiny_mce/plugins/filemanager/classes/CorePlugin.php basename Parameter Remote File Inclusion
2011-04-21	71926	Automagick Tube Script index.php module Parameter XSS
2011-04-20	71981	ChatLakTurk Video Script ara.php ara Parameter XSS
2011-04-11	71796	PHP-Lance index.php language Parameter SQL Injection
2011-04-11	71797	PHP-Lance buy_services.php language Parameter SQL Injection
2011-04-11	71798	PHP-Lance sell_services.php language Parameter SQL Injection
2011-04-11	71799	PHP-Lance feedback_display.php seller_id Parameter SQL Injection
2011-04-11	71800	PHP-Lance feedback_display_b.php buyer_id Parameter SQL Injection
2011-04-11	71801	PHP-Lance project_details.php id Parameter SQL Injection
2011-04-11	71802	PHP-Lance categories.php catid Parameter SQL Injection
2011-03-29	71290	Ays Blog index.php id SQL Injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.