OSVDB: Open Sourced Vulnerability Database

Creditee: HACKERS PAL

Known Contact Information:

(as of 2005-11-04)
(as of 2006-09-21)

Known Affiliations:

HACKERS PAL (as of 2007-01-29)

Disclosed Vulnerabilities (14):

Disc. Date	OSVDB ID	CVEID	Title
2009-01-25	51591	2009-0294	WB News search.php config[installdir] Parameter Remote File Inclusion
2009-01-25	51583	2009-0294	WB News archive.php config[installdir] Parameter Remote File Inclusion
2009-01-25	51584	2009-0294	WB News comments.php config[installdir] Parameter Remote File Inclusion
2009-01-25	51585	2009-0294	WB News news.php config[installdir] Parameter Remote File Inclusion
2009-01-25	51586	2009-0294	WB News base/News.php config[installdir] Parameter Remote File Inclusion
2009-01-25	51587	2009-0294	WB News base/SendFriend.php config[installdir] Parameter Remote File Inclusion
2009-01-25	51588	2009-0294	WB News base/Archive.php config[installdir] Parameter Remote File Inclusion
2009-01-25	51589	2009-0294	WB News base/Comments.php config[installdir] Parameter Remote File Inclusion
2007-01-29	35416	2007-0581	EclipseBB includes/functions.php phpbb_root_path Parameter Remote File Inclusion
2006-09-21	32291	2006-4989 2006-4988	Wili-CMS thumbnail.php Path Disclosure
2006-09-21	32296	2006-4988	Wili-CMS relocate.php query String XSS
2006-09-21	32297	2006-4988	Wili-CMS example-view/inc/print_button.php globals[pageid] Parameter XSS
2006-09-21	32298	2006-4987 2006-4988	Wili-CMS example-view/templates/article.php globals[content_dir] Parameter Remote File Inclusion
2005-11-04	20511	2005-3544 2006-0779	XMB u2u.php username Parameter XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.