1121 matches found
Unrestricted file upload
Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photoes/...
CVE-2008-6920
CVE-2008-6920 describes an unrestricted file upload in auth.php of phpEmployment 1.8, enabling remote code execution by uploading a file with an executable extension during regnew and then accessing it via a direct request to the file under photoes/. The core issue is lack of proper validation an...
CVE-2008-6921
Unrestricted file upload vulnerability in index.php in phpAdBoard 1.8 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in photoes/...
Ruby BigDecimal库拒绝服务漏洞
BUGTRAQ ID: 35278 CVECAN ID: CVE-2009-1904 Ruby是一种功能强大的面向对象的脚本语言。 Ruby所使用的BigDecimal标准函数库中存在拒绝服务漏洞，在将BigDecimal对象转换为浮点数时可能会触发分段错误，导致链接到该库的应用崩溃。 Yukihiro Matsumoto Ruby 1.8.x 厂商补丁： Yukihiro%20Matsumoto ------------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Uebimiau Web-Mail <= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities
Exploit for unknown platform in category web applications ======================================================================= Uebimiau Web-Mail After That Click Write To File Go /uebimiau/index.php?cmd=id 0day.today 2018-01-04...
Uebimiau Web-Mail 3.2.0-1.8 - Remote File Overwrite
Uebimiau Web-Mail 3.2.0-1.8 - Remote File Overwrite Uebimiau Webmail After That Click Write To File Go /uebimiau/index.php?cmd=id See Pic :http://www.almlf.com/get-6-2009-almlfcomakszizl2.png Thanx To ... | || \ \ \ / / / \ / | ---| |----| | | \ / / / ^ \ | | | | | / \ / / /\ \ | | | | | | | |...
Moodle File Disclosure Vulnerability (Mar 2009)
Moodle is prone to a file disclousure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; if descripti...
CVE-2009-0598
CVE-2009-0598 affects PhpMesFilms (versions 1.0 and 1.8). The vulnerability is an SQL injection in index.php via the id parameter, allowing remote attackers to execute arbitrary SQL. Underlying cause: unsafe handling of the id input. Impact is partial confidentiality/integrity/availability with C...
CVE-2009-0444
Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 theme parameter to a 179squareboxpdslist/view.php, b 179squareboxminishopexpand/view.php, c...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 theme parameter to a 179squareboxpdslist/view.php, b 179squareboxminishopexpand/view.php, c...
GRBoard 1.8 - Multiple Remote File Inclusions
GRBoard 1.8 - Multiple Remote File Inclusions GRBoard 1.8 Remote File Inclusion Vulnerability bY [email protected] / GRBoard VERSION 1.8 is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion vulnerability. Here i...
GRBoard 1.8 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. GRBoard 1.8 Remote File Inclusion Vulnerability bY [email protected] / GRBoard VERSION 1.8 is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion vulnerability. Here is the...
GRBoard 1.8 Remote File Inclusion
GRBoard 1.8 Remote File Inclusion Vulnerability bY [email protected] / GRBoard VERSION 1.8 is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion vulnerability. Here is the details: / TEST ON VERSION GRBoard 1.8...
GRBoard 1.8 - Multiple Remote File Inclusions
GRBoard 1.8 Remote File Inclusion Vulnerability bY [email protected] / GRBoard VERSION 1.8 is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion vulnerability. Here is the details: / TEST ON VERSION GRBoard 1.8...
MoinMoin 1.8 - AttachFile.py Cross-Site Scripting
MoinMoin 1.8 - AttachFile.py Cross-Site Scripting source: https://www.securityfocus.com/bid/33365/info MoinMoin is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code...
PHP-Fusion Mod vArcade 1.8 (comment_id) SQL Injection Vulnerability
No description provided by source. ---------------------------------------------------------------- Script : PHP-Fusion Mod vArcade 1.8 Type : Sql Injection Vulnerability Risk : High ---------------------------------------------------------------- Download From : http://venue.nu/...
PHP-Fusion Mod vArcade 1.8 - comment_id SQL Injection
PHP-Fusion Mod vArcade 1.8 - commentid SQL Injection ---------------------------------------------------------------- Script : PHP-Fusion Mod vArcade 1.8 Type : Sql Injection Vulnerability Risk : High ---------------------------------------------------------------- Download From : http://venue.nu...
DEBIAN-CVE-2008-5813
SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-5813
SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information...