QuickTalk forum 1.3 (lang) Local File Inclusion Vulnerabilities

No description provided by source. QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

Apache Prefork MPM vulnerabilities - Report

----- Apache Prefork MPM vulnerabilities ---------------------------------- PSNC Security Team http://security.psnc.pl/files/apachereport.pdf 1. Introduction This small case study is a result of source code analysis of Apache httpd server MPM modules. The main goal of this document is to show, wh...

C-Ares DNS库远程缓存毒药漏洞

C-Ares DNS库是一款可以执行DNS请求和异步名字解析的C库。 C-Ares DNS库使用安全DNS传送ID存在问题，远程攻击者可以利用漏洞进行DNS缓存"毒药"攻击，可进行中间人和欺骗伪造攻击。 C-Ares DNS库实现使用DNS "Transaction ID"字段使用的pseudo随机号码是递增的，因此可预测，可猜测的DNS "Transaction ID"可导致缓存"毒药"攻击。攻击者借此可以进行拒绝服务，中间人欺骗，伪造站点等攻击。 Daniel Stenberg c-ares 1.3.2 Daniel Stenberg c-ares 1.3.1 Daniel...

CVE-2007-2657

CVE-2007-2657 affects the PrecisionID Barcode 1.3 ActiveX control (PrecisionID_DataMatrix.DLL). The vulnerability allows a remote attacker to cause a denial of service by sending a long argument to the SaveBarCode method. The description is generic and specifies no concrete root cause beyond the ...

CVE-2007-2621

CVE-2007-2621 affects Thyme Calendar 1.3. The event_view.php script uses the eid parameter to build a database query without proper sanitization, enabling SQL injection. This allows remote attackers to run arbitrary SQL commands against the database. The vulnerability is documented across multipl...

CVE-2007-2621

SQL injection vulnerability in eventview.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter...

Thyme Calendar 1.3 - SQL Injection

Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION ------------------------------------------------------------------- A vulnerability in exists in Thyme Calendar 1.3 and possibly...

Thyme Calendar 1.3 - SQL Injection

Thyme Calendar 1.3 - SQL Injection Thyme Calendar 1.3 SQL Vulnerability Exploit by Warlord codehook.110mb.com ------------------------------------------------------------------- OVERVIEW AND DEFINITION ------------------------------------------------------------------- A vulnerability in exists i...

Remote file inclusion

PHP remote file inclusion vulnerability in plugin/HPDEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sdir parameter...

CVE-2007-2573

PHP remote file inclusion vulnerability in plugin/HPDEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the sdir parameter...

CVE-2007-2573

PHPtree 1.3 is affected by CVE-2007-2573 via a remote file inclusion in plugin/HP_DEV/cms2.php, where an attacker can supply a URL in the s_dir parameter to execute arbitrary PHP code. The vulnerability arises from improper handling of the s_dir input, enabling code execution on the server. The a...

PHPtree 1.3 (cms2.php s_dir) Remote File Inclusion Vulnerability

No description provided by source. PHPtree Remote file inclusion sdir Download script : http://www.phptree.de/content/download/public/phptree/phptreev1.3.zip Thanks Str0ke Exploit http://site.com/phptreepath/plugin/HPDEV/cms2.php?sdir=shell.txt? Discovered by : ThE TiGeR MiroTiger100atHotmaildotc...

pstru-disclose.txt

/-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-\ | | | Y! Underground Group | | | -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-/...

PStruh-CZ 1.3/1.5 (download.asp File) File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== PStruh-CZ 1.3/1.5 download.asp File File Disclosure Vulnerability ===================================================================...

PStruh-CZ 1.3/1.5 - 'download.asp' File Disclosure

/-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-\ | | | Y! Underground Group | | | -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-/...

PT-2007-3539 · N/X +3 · Web Content Management News System +4

Name of the Vulnerable Software and Affected Versions: PclTar module versions 1.3 and 1.3.1 Joomla! version 1.5.0 Beta N/X Web Content Management System WCMS version 4.5 CJG EXPLORER PRO version 3.3 phpSiteBackup version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in jGallery 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the GJGALLincpath parameter...

CVE-2007-2158

CVE-2007-2158 is a PHP remote file inclusion vulnerability in jGallery 1.3. The flaw allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the G_JGALL[inc_path] parameter of index.php. Public references (including exploit-db) confirm a remote code execution risk, with NVD...

jGallery 1.3 (index.php) Remote File Inclusion Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Team + +...

jGallery 1.3 (index.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ jGallery 1.3 index.php Remote File Inclusion Vulnerability ============================================================...