Kure 0.6.3 (index.php post,doc) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Kure 0.6.3 index.php post,doc Local File Inclusion Vulnerability ================================================================== Kure 0.6.3 index.php post,doc Local File...

Kure 0.6.3 - 'index.php' Local File Inclusion

Kure 0.6.3 index.php post,doc Local File Inclusion Vulnerability url: http://code.google.com/p/kure/downloads/list Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

CVE-2008-3377

The CVE-2008-3377 entry describes an SQL injection in the PHP-based application phpTest 0.6.3, specifically in picture.php where the image_id parameter is used in a SQL query. This is a server-side vulnerability that could allow remote attackers to execute arbitrary SQL commands. The NVD entry no...

CVE-2008-3377

SQL injection vulnerability in picture.php in phpTest 0.6.3 allows remote attackers to execute arbitrary SQL commands via the imageid parameter...

PHPTest 0.6.3 - SQL Injection

Name : phpTest 0.6.3 picture.php imageid Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Dork : sorry, today no dork ; Greetz : ZaBeaTy, str0ke, GregStar, Voo|doo, ixos, 0in, suN8Hclf, TBH, Avantura : Source code of "picture.php" : 24. ptregister'GET', 'imageid'; 25. 26. if...

Design/Logic Flaw

pamsmauthenticate in pampgsql.c in libpam-pgsql 0.6.3 does not properly consider operator precedence when evaluating the success of a pamgetpass function call, which allows local users to gain privileges via a SIGINT signal when this function is executing, as demonstrated by a CTRL-C sequence at ...

Fedora 7 : mod_suphp-0.6.3-1.fc7 (2008-2815)

This update is a security update fixing two local privilege escalation problems. modsuphp 0.6.2 contains two race condition regarding symlink checks. Using this attack vector a local attacker has the ability of changing symlinks in the timeframe between the security check and the php execution...

Directory traversal

Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via a .. dot dot in the files parameter...

CVE-2008-0465

Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via a .. dot dot in the files parameter...

CVE-2008-0465

The CVE-2008-0465 entry describes a directory traversal vulnerability in Seagull 0.6.3, specifically in the optimizer.php component. The root cause is improper handling of the files parameter, allowing an attacker to traverse directories using dot-dot (..) to read arbitrary files. The vulnerabili...

CVE-2008-0465

Directory traversal vulnerability in optimizer.php in Seagull 0.6.3 allows remote attackers to read arbitrary files via a .. dot dot in the files parameter...

seagull-063-xss.txt

fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: Seagull STABLE 0.6.3 http://seagullproject.org/ Vulnerable: Seems that none of the theme css renderers sanatize...

Seagull 0.6.3 - files Remote File Disclosure

Seagull 0.6.3 - files Remote File Disclosure fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: Seagull STABLE 0.6.3 http://seagullproject.org/ Vulnerable:...

Seagull 0.6.3 (optimizer.php files) Remote File Disclosure Vulnerability

No description provided by source. fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: Seagull STABLE 0.6.3 http://seagullproject.org/ Vulnerable: optimizer.php;...

Sql injection

SQL injection vulnerability in FlexBB 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbbtempid parameter in a cookie...

LandShop 0.6.3 - ls.php Multiple SQL Injections

LandShop 0.6.3 - ls.php Multiple SQL Injections source: https://www.securityfocus.com/bid/20989/info LandShop is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues could allow an attacker to steal...