PHP safe mode protection bypass with htaccess

It's possible to manipulate function iniset and sessionsavepath with htaccess settings...

PHP 5.2.5之前版本多个安全漏洞

BUGTRAQ ID: 26403 CVECAN ID: CVE-2007-4887 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的5.2.5之前版本中存在多个安全漏洞，具体包括： 1 htmlentities和htmlspecialchars函数中不会接受部分多字节序列； 2 fnmatch、setlocale和glob函数中存在多个缓冲器溢出； 3 处理.htaccess文件中的错误可能导致通过.htaccess文件修改mail.forceextraparameters php.ini指令，绕过disablefunctions指令； 4...

Local File Inclusion and Information Leakage vulnerabilities in PHP-Nuke

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Local File Inclusion и Information Leakage уязвимостях в PHP-Nuke. Уязвимости в скриптах autohtml.php и autohtml0.php в параметре filename. Local File Inclusion: http://site/autohtml.php?filename=../file.php...

Default configuration

The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory cfgRCSWorkAreaDir under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied...

CVE-2007-5193

The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory cfgRCSWorkAreaDir under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied...

CVE-2007-5193

The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory cfgRCSWorkAreaDir under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied...

CVE-2007-5193

Twiki 4.1.2 on Debian GNU/Linux (and possibly other OS) has a default configuration that places the work area directory (cfg{RCS}{WorkAreaDir}) under the web document root. This may allow remote attackers to obtain sensitive information if .htaccess restrictions are not applied. Public details co...

CVE-2007-5193: Undefined Security Weakness

The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory cfgRCSWorkAreaDir under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied...

zomplog381-upload.txt

?php Zomplog = 3.8.1 Arbitrary File Upload Exploit by InATeam http://inattack.ru/ tested on versions 3.8.1 with security patch, 3.8.1, 3.8, 3.7.5 echo "------------------------------------------------------------\n"; echo "Zomplog = 3.8.1 Arbitrary File Upload Exploit\n"; echo "coded by Raz0r,...

Zomplog <= 3.8.1 upload_files.php Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications =============================================================== Zomplog = 3.8.1 uploadfiles.php Arbitrary File Upload Exploit =============================================================== ?php Zomplog = 3.8.1 Arbitrary File Upload Exploi...

simpnews24103-fdisclose.txt

netVigilance Security Advisory 69 SimpNews version 2.41.03 File Content Disclosure Vulnerability Description: SimpNews is a news system written in PHP. Features: Data stored in MySQL, admin interface, support for multiple languages, support for multiple instances in one database, own header,...

SimplePHPBlog Hacking

How to hack a server with Simple PHP Blog uploading an htacess file from imguploadcgi.php page. Tested on v0.4.9 by Demential http://www.hackish.eu mailto: [email protected] video here: http://hackish.eu/video/phpblog.avi vlc download: http://www.videolan.org/vlc/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP code via a URL in the slthemeunixpath parameter to 1 adminfooter.php, 2 infofooter.php, 3 themefooter.php, 4 browsefooter.php, 5 accountfooter.php, or 6...

CVE-2007-5015

CVE-2007-5015 affects Streamline PHP Media Server 1.0-beta4. The vulnerability is a set of remote file inclusion flaws in the core/theme/includes/ footer files (admin_footer.php, info_footer.php, theme_footer.php, browse_footer.php, account_footer.php, search_footer.php) that can be triggered via...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer webmex 3.2.2 allow remote attackers to execute arbitrary PHP code via 1 a URL in the pathinclude parameter to includes/rss.class.php, 2 a URL in the pathtemplate parameter to a templates/main.tpl.php or b...

CVE-2007-4948

Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer webmex 3.2.2 allow remote attackers to execute arbitrary PHP code via 1 a URL in the pathinclude parameter to includes/rss.class.php, 2 a URL in the pathtemplate parameter to a templates/main.tpl.php or b...

CVE-2007-4022: Undefined Security Weakness

Cross-site scripting XSS vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers to inject arbitrary web script or HTML via the resname parameter...

cPanel 10.9.1 XSS

Aria-Security Team cPanel 10.9.1 XSS /frontend/x/htaccess/changepro.html?protected=1&resname=XSSGOESHERE click on Go Back... Voila! Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...

Authentication flaw

MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests...

CVE-2007-3567: Undefined Security Weakness

MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests...