AuraCMS 1.62 - stat.php Remote Code Execution

AuraCMS 1.62 - stat.php Remote Code Execution !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 - stat.php Remote Code Execution Exploit Waktu : Jan 16 2008 10:00PM Software : AuraCMS 1.62 AuraCMS Mod Block Statistik |...

runcms-multi.txt

Digital Security Research Group Advisory Application: RunCMS Versions Affected: RunCMS 1.6 Vendor URL: http://www.runcms.org Bugs: SQL Injections, XSS, PHP Include, Predictable session id, etc. Exploits: Aviable Reported: 14.12.2007 Vendor response: 15.12.2007 Date of Public Advisory: 25.12.2007...

Multiple vulnerabilities in RUNCMS 1.6 by DSecRG

Digital Security Research Group Advisory Application: RunCMS Versions Affected: RunCMS 1.6 Vendor URL: http://www.runcms.org Bugs: SQL Injections, XSS, PHP Include, Predictable session id, etc. Exploits: Aviable Reported: 14.12.2007 Vendor response: 15.12.2007 Date of Public Advisory: 25.12.2007...

RunCMS 1.6 - Multiple Vulnerabilities

RunCMS 1.6 - Multiple Vulnerabilities Digital Security Research Group Advisory Application: RunCMS Versions Affected: RunCMS 1.6 Vendor URL: http://www.runcms.org Bugs: SQL Injections, XSS, PHP Include, Predictable session id, etc. Exploits: Aviable Reported: 14.12.2007 Vendor response: 15.12.200...

PMOS Help Desk 2.4 - Remote Command Execution

PMOS Help Desk 2.4 - Remote Command Execution ?php / ------------------------------------------------------ PMOS Help Desk = 2.4 Remote Command Execution Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

RunCMS 1.6 - Multiple Vulnerabilities

Digital Security Research Group Advisory Application: RunCMS Versions Affected: RunCMS 1.6 Vendor URL: http://www.runcms.org Bugs: SQL Injections, XSS, PHP Include, Predictable session id, etc. Exploits: Aviable Reported: 14.12.2007 Vendor response: 15.12.2007 Date of Public Advisory: 25.12.2007...

TikiWiki 1.9.8 Remote PHP Injection Vulnerability

No description provided by source. TikiWiki 1.9.8 Remote PHP Injection Vulnerability Example: http://www.example.com/tikiwiki/tiki-graphformula.php?w=1&h=1&s=1&min=1&max=2&f=x.tan.phpinfo&t=png&title=...

tikiwiki-inject.txt

TikiWiki 1.9.8 Remote PHP Injection Vulnerability Example: http://www.example.com/tikiwiki/tiki-graphformula.php?w=1&h=1&s=1&min=1&max=2&f=x.tan.phpinfo&t=png&title=...

TikiWiki 1.9.8 Remote PHP Injection Vulnerability

Exploit for unknown platform in category web applications ================================================= TikiWiki 1.9.8 Remote PHP Injection Vulnerability ================================================= TikiWiki 1.9.8 Remote PHP Injection Vulnerability Example:...

TikiWiki php injection

оф сайт http://tikiwiki.org/ уязвимость носит критический характер. файл tiki-graphformula.php содержит код: foreach arrayvalues $GET'f' as $key=$formula $formula = convertformula $formula ; ... function convertformula $formula ... return createfunction'$x', "return $formula;"; Poc:...

TikiWiki 1.9.8 - Remote PHP Injection

TikiWiki 1.9.8 - Remote PHP Injection TikiWiki 1.9.8 Remote PHP Injection Vulnerability Example: http:/server/tikiwiki/tiki-graphformula.php?w=1&h=1&s=1&min=1&max=2&f=x.tan.phpinfo&t=png&title= milw0rm.com 2007-10-10...

TikiWiki 1.9.8 - Remote PHP Injection

TikiWiki 1.9.8 Remote PHP Injection Vulnerability Example: http:/server/tikiwiki/tiki-graphformula.php?w=1&h=1&s=1&min=1&max=2&f=x.tan.phpinfo&t=png&title= milw0rm.com 2007-10-10...

drupal Zend Hash Del Key Or Index php injection

оф сайт http://drupal.org/ уязвимы версии drupal 5 =5.2 и возможно другие. благодоря возможности подменить некоторые переменные можно вызвать произвольную функцию определенную в скриптах посредством calluserfunc, в результате чего можно выполнить произвольный код PHP через встроеную функцию движк...

уязвимости smf 1.1.2

Simple Machines Forum 1.1.2 http://www.simplemachines.org/ 1 слабая реализация звуковой капчи в этом движке звуковая капча реализуется посредством посылания браузеру звукового фала в формате WAV, файл создается путем склеивания произвольным образом нескольких файлов с разными звуками, и служит...

Link Request Contact Form 3.4 - Remote Code Execution

-=--------------------ADVISORY-------------------=- Link Request Contact Form v3.4 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Link Request Contact Form -=+ Version: 3.4 -=+ Vendor's URL:...

TCExam <= 4.0.011 (SessionUserLang) Shell Injection Exploit

No description provided by source. ?php printr' -------------------------------------------------------------------------- TCExam = 4.0.011 $COOKIE"SessionUserLang" shell injection exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...

shoutpro-pwn.txt

?php echo "\n"; echo " Special Greetings To - Timq,Warpboy,The-Maggot \n"; echo "\n\n\n"; //Writes Files - Under 100 bytes to meet requireme...

LS simple guestbook (v1) Remote Code Execution Vulnerability

No description provided by source. Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize user input...

CVE-2007-1842

Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the table parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, a related issue to CVE-2006-2019...

adv73-K-159-2007.txt

----------------------------------------------------------------------------------------- ECHOADV73$2007 MySQL Commander = 2.7 home Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni Date : Marc...