phpSANE file_save Parameter Remote File Include

The remote web server is running phpSANE, an open source web-based, front-end to scanners using SANE Scanner Access Now Easy. The version of phpSANE installed on the remote host fails to sanitize user-supplied input to the 'filesave' parameter of the 'save.php' script before using it to include P...

phpSANE 0.5.0 (save.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpSANE 0.5.0 save.php Remote File Inclusion Vulnerability ============================================================...

phpSANE 0.5.0 (save.php) Remote File Inclusion Vulnerability

No description provided by source. ----------------------------------------------------------------------------------- phpSANE v 0.5.0 save.php Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------- Author: CoBRa21 Mail:...

PHPSANE 0.5.0 - 'save.php' Remote File Inclusion

----------------------------------------------------------------------------------- phpSANE v 0.5.0 save.php Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------- Author: CoBRa21 Mail: [email protected] Script...

PHP Easy Download admin/save.php Paramater Code Injection Vulnerability

The remote web server contains a PHP script that is affected by a remote code execution issue. Description: The version of PHP Easy Download installed on the remote host fails to sanitize input to the 'moreinfo' parameter before using it in the 'save.php' script. By sending a specially-crafted...

PHP Easy Download admin/save.php Parameter Code Injection Vulnerability

The version of PHP Easy Download installed on the remote host fails to sanitize input to the SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-4487: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 sitename, 2 email, 3 themechosen, 4 hp, 5 cmeta, 6 id, and 7 cjs parameters. NOTE: the provenance of this information is unknown; the details are obtained solely fro...

CVE-2008-4489: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the themechosen parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in mesajformu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Isim, 2 Mesajiniz, and 3 E-posta fields. NOTE: these probably correspond to the isim, mesaj, and posta parameters to save.php...

CVE-2007-2148: Undefined Security Weakness

Direct static code injection vulnerability in admin/save.php in Stephen Craton aka WiredPHP Chatness 2.5.3 and earlier allows remote authenticated administrators to inject PHP code into .html files via the html parameter, as demonstrated by head.html and foot.html, which are included and executed...

Chatness 2.5.3 (options.php/save.php) Remote Code Execution Exploit

No description provided by source. ?/ Files: options.php, save.php Affects: Chatness = 2.5.3 Date: 12th April 2007 Issue Description: =========================================================================== Chatness suffers with two main vulnerabilities, the first of these in /admin/options.ph...

chatness253-multi.txt

?/ Files: options.php, save.php Affects: Chatness = 2.5.3 Date: 12th April 2007 Issue Description: =========================================================================== Chatness suffers with two main vulnerabilities, the first of these in /admin/options.php the problems occur because the...

Chatness <= 2.5.3 (options.php/save.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ====================================================================== Chatness = 2.5.3 options.php/save.php Remote Code Execution Exploit ====================================================================== ?/ Files: options.php, save.p...

Chatness 2.5.3 - options.phpsave.php Remote Code Execution

Chatness 2.5.3 - options.phpsave.php Remote Code Execution ?/ Files: options.php, save.php Affects: Chatness = 2.5.3 Date: 12th April 2007 Issue Description: =========================================================================== Chatness suffers with two main vulnerabilities, the first of...

Chatness 2.5.3 - '/options.php/save.php' Remote Code Execution

?/ Files: options.php, save.php Affects: Chatness = 2.5.3 Date: 12th April 2007 Issue Description: =========================================================================== Chatness suffers with two main vulnerabilities, the first of these in /admin/options.php the problems occur because the...

CVE-2006-4575

Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the 1 lastname, 2 firstname, 3 passwordOld, 4 passwordNew, 5 id, 6 language, 7 defaultLetter, 8 newuserPass, 9 newuserType, 10 newuserEmail parameters in a user.php; the 1...

CVE-2006-4577

Multiple cross-site scripting XSS vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 email, 2 websites, and 3 groupAddName parameters in a save.php; the 4 errorMsg parameter in b index.php; and the 5 goTo and 6...

CVE-2006-4577

CVE-2006-4577 affects The Address Book 1.04e. It contains multiple cross-site scripting (XSS) vulnerabilities allowing an attacker to inject arbitrary scripts via: (1) email, (2) websites, (3) groupAddName in save.php; (4) errorMsg in index.php; (5) goTo and (6) search in search.php. CVSS v2 base...

CVE-2006-4575: Undefined Security Weakness

Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the 1 lastname, 2 firstname, 3 passwordOld, 4 passwordNew, 5 id, 6 language, 7 defaultLetter, 8 newuserPass, 9 newuserType, 10 newuserEmail parameters in a user.php; the 1...

CVE-2006-4577: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the 1 email, 2 websites, and 3 groupAddName parameters in a save.php; the 4 errorMsg parameter in b index.php; and the 5 goTo and 6...