OSVDB: Open Sourced Vulnerability Database

User Profile for dookie2000ca

General Information

Registered On:

2010-05-25

User Role:	User
User Score:	159.70
30 day score:	0.00

Latest Activity

Latest Approved changes:

82023 - Symantec Web Gateway /spywall/releasenotes.php relfile Parameter Remote File Inclusion
82927 - Symantec Web Gateway /spywall/download_file.php Arbitrary File Access
72497 - ClipBucket index.php cb_lang Cookie SQL Injection
72422 - Ultimate PHP Board (UPB) ajax.php Crafted POST Request Arbitrary File Attachment Deletion
72368 - Jcow index.php p Parameter Traversal Local File Inclusion
72365 - NoticeBoardPro deleteItem3.php userID Parameter SQL Injection
72366 - NoticeBoardPro editItem1.php File Upload Arbitrary PHP Code Execution
72390 - Vanilla Forums index.php p Parameter Traversal Local File Inclusion
72398 - Winamp System Exclusive MIDI Message Processing Overflow
72345 - SlimPDF Reader PDF File Processing Overflow
72181 - SPlayer wcstol() Function Content-Type Header HTTP Response Processing Overflow
72231 - Serva HTTP Request Processing DoS
72107 - Time and Expense Management System lookup.php form Parameter XSS
72106 - Time and Expense Management System systemadmin/BackupData.php Multiple Parameter Command Injection
72105 - Time and Expense Management System systemadmin/Edit.php processIncomingFormData() Function Arbitrary File Upload
72112 - FrontAccounting (FA) admin/users.php Arbitrary Admin User Creation CSRF
72101 - MJM Core Player s3m File Handling Overflow
72102 - MJM QuickPlayer s3m File Handling Overflow
72051 - phpGraphy themes/default/header.inc.php theme_dir Parameter XSS
72052 - phpGraphy Admin User Creation CSRF
72050 - Subtitle Processor M3U File Handling Overflow
72064 - eyeOS Uploaded Image XSS
71999 - phpMyChat Plus avatar.php pmc_password Parameter XSS
71998 - phpMyChat Plus lurking.php Multiple Cookie SQL Injection
72006 - OrangeHRM plugins/PluginController.php path Parameter Encoded Traversal Arbitrary File Access
71968 - web2Project calendar.php token Parameter SQL Injection
72129 - Dolibarr ERP/CRM htdocs/user/passwordforgotten.php theme Parameter Traversal Arbitrary File Access
72128 - Dolibarr ERP/CRM htdocs/document.php lang Parameter XSS
72399 - PHP phar Extension ext/phar/tar.c phar_parse_tarfile() Function TAR File Handling Overflow
71989 - zenphoto zp-core/admin.php X-Forwarded-For HTTP Header XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.