CVE-2008-6538

DeStar 0.2.2-5 allows remote attackers to add arbitrary users via a direct request to config/add/CfgOptUser...

CVE-2008-6539

Static code injection vulnerability in user/settings/ in DeStar 0.2.2-5 allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destarcfg.py via a crafted pin parameter...

CVE-2008-6539

The CVE-2008-6539 entry is concrete: DeStar 0.2.2-5 contains a static code injection in the user/settings/ path that allows remote authenticated users to add arbitrary administrators and inject arbitrary Python code into destar_cfg.py via a crafted pin parameter. The underlying issue is a code-in...

CMS Mini 0.2.2 - Remote Command Execution

--+++================================================================+++-- --+++====== CMS Mini ". "\n+ Ex. : php xpl.php localhost /CMSmini". "\n\n"; if $argc != 3 usage; $hostname = $argv 1; $path = $argv 2; $fp = fsockopen $hostname, 80; $post = "message="; $request = "POST...

Directory traversal

Multiple directory traversal vulnerabilities in view/index.php in CMS Mini 0.2.2 allow remote attackers to read arbitrary local files via a .. dot dot in the 1 path and 2 p parameter...

CVE-2008-2961

CVE-2008-2961 affects CMS Mini 0.2.2. The vulnerability is a directory traversal in view/index.php, where an attacker can read arbitrary local files by supplying a .. sequence in the path parameter and the p parameter. Impact is partial confidentiality loss (read access to local files). The NVD e...

CMS Mini 0.2.2 Multiple Local File Inclusion Vulnerabilities

No description provided by source. AUTHOR : CWH Underground DATE : 22 June 2008 SITE : www.citec.us APPLICATION : CMS Mini VERSION : 0.2.2 VENDOR : http://www.cmsmini.it/ DOWNLOAD : http://downloads.sourceforge.net/cmsmini --- Local File Inclusion --- ---------------------------- Vulnerable File...

CMS Mini 0.2.2 - Multiple Local File Inclusions

===================================================== CMS Mini 0.2.2 Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Destar 0.2.2-5 - Arbitrary Add Admin

Destar 0.2.2-5 - Arbitrary Add Admin !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com/ Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py...

Destar 0.2.2-5 - Arbitrary Add New User

Destar 0.2.2-5 - Arbitrary Add New User !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py...

XOOPS Module Gallery 0.2.2 (gid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== XOOPS Module Gallery 0.2.2 gid Remote SQL Injection Vulnerability =================================================================== XOOPS Module Gallery 0.2.2 SQL...

CVE-2007-2311

CVE-2007-2311 describes a PHP remote file inclusion in BlooFoxCMS 0.2.2, specifically in install/index.php, allowing an attacker to execute arbitrary PHP code via a URL placed in the content_php parameter. The root cause is the handling of user-controlled content_php leading to code execution; th...

CVE-2006-5767

PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the droot parameter...

Ptl0.2.2.txt

ToXiC Ptl 0.2.2 Local File Inclusion by ToXiC CreW BuG FounD by Drago84 Application Affect:Ptl 0.2.2 Page: index.php Dir : / Problem: iffileexists$configMENUCONFFILE include "./".$configMENUCONFFILE; ExPloit : 1http://www.site.com/ptldir/lib/index.php?2configMENUCONFFILE=...

SIPS v 0.2.2 < = Remote File Include Vulnerability

SIPS v 0.2.2 = = = = = = = = = = = = = Remote File Include Vulnerability ; Discovred By : ThELeO ; Software : SIPS v 0.2.2 ; Exploit : http://Www.Example.Com/Script/sipssys/code/box.inc.php?config"sipssys"=U r Evil Script ; Greetz : M.I.D.TDrackanZ, Mr.IlysS, NeThug47, Death & All Moroccan & Arab...

CVE-2005-1110

Stack-based buffer overflow in the RespondeHTTPPendiente function in the HTTP server for SUMUS 0.2.2 allows remote attackers to execute arbitrary code via a large packet sent to TCP port 81...

CVE-2005-1110

The CVE-2005-1110 entry describes a stack-based buffer overflow in the RespondeHTTPPendiente function of SUMUS 0.2.2’s HTTP server. A large packet sent to TCP port 81 can allow remote attackers to execute arbitrary code. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network access, l...

Sumus 0.2.2 httpd Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ================================================ Sumus 0.2.2 httpd Remote Buffer Overflow Exploit ================================================ / sumusv0.2.2: httpd remote buffer overflow exploit. by: vade79/v9 email protected...

Multiple Vulnerabilities in PWS 0.2.2

Donato Ferrante Application: Pegasi Web Server PWS http://pws.sourceforge.net Version: 0.2.2 Bugs: Multiple Vulnerabilities Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...