Code injection

Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv96 allows 1 context-dependent attackers to cause a denial of service panic via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server wi...

CVE-2008-3595

PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers to execute arbitrary PHP code via a URL in the CFGtxtsqlclass parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers to execute arbitrary PHP code via a URL in the CFGtxtsqlclass parameter...

CVE-2008-3595

PHP remote file inclusion vulnerability in examples/txtSQLAdmin/startup.php in txtSQL 2.2 Final allows remote attackers to execute arbitrary PHP code via a URL in the CFGtxtsqlclass parameter...

CVE-2008-3595

txtSQL 2.2 Final is affected by a PHP remote file inclusion in examples/txtSQLAdmin/startup.php. The vulnerability allows an attacker to supply a URL for CFG[txtsql][class], enabling execution of arbitrary PHP code. This CVE (CVE-2008-3595) is rated HIGH (CVSS 2.0 base score 9.3) by NVD. The conn...

txtSQL 2.2 Final - startup.php Remote File Inclusion

txtSQL 2.2 Final - startup.php Remote File Inclusion ??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The...

txtsql-rfi.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

Linux Kernel 'uvc_driver.c'格式描述符解析缓冲区溢出漏洞

BUGTRAQ ID: 30514 CNCAN ID：CNCAN-2008080421 Linux是一款开放源代码的操作系统。 Linux格式描述符解析存在缓冲区溢出，本地攻击者可以利用漏洞对系统进行拒绝服务攻击，可能导致特权提升。 目前没有详细漏洞细节提供。 Linux kernel 2.6.26 -rc6 Linux kernel 2.6.25 .9 Linux kernel 2.6.25 .8 Linux kernel 2.6.25 .7 Linux kernel 2.6.25 .6 Linux kernel 2.6.25 .5 Linux kernel 2.6.25 .13...

CVE-2008-3330

Cross-site scripting XSS vulnerability in services/obrowser/index.php in Horde 3.2 and Turba 2.2 allows remote attackers to inject arbitrary web script or HTML via the contact name...

CVE-2008-3330

CVE-2008-3330 is an XSS vulnerability in Horde 3.2 and Turba 2.2, exploitable via the contact name in services/obrowser/index.php. The OpenVAS entries describe Horde Turba HTML/HTML-injection vulnerabilities due to insufficient input sanitization, with affected versions including Horde 3.1.7, 3.2...

Linux Kernel 2.6.x chown() Group Ownership Alteration Exploit

No description provided by source. / $Id: raptorchown.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorchown.c - syschown missing DAC controls on Linux Copyright c 2004 Marco Ivaldi [email protected] Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of file...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the modroot parameter...

CVE-2008-2882

CVE-2008-2882 affects the web application component upgrade.asp in sHibby sHop 2.2 and earlier . The vulnerability arises because the upgrade action does not require administrative authentication, enabling a remote attacker to update a file (via a direct request) and potentially cause other impac...

CVE-2008-2877

PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the modroot parameter...

CVE-2008-2877

CVE-2008-2877 affects cmsWorks 2.2 RC4, where a PHP remote file inclusion vulnerability exists in admin/include/lib.module.php. When register_globals is enabled, an attacker can supply a URL in the mod_root parameter to execute arbitrary PHP code. The entry lists a CVSSv2 base score of 6.8 (MEDIU...

PHP 5 'chdir()'和'ftok()' 'safe_mode'安全绕过漏洞

BUGTRAQ ID: 29796 CVE ID：CVE-2008-2666 CNCVE ID：CNCVE-20082666 PHP 5是一款开放源代码的网络编程语言。 PHP 5 'chdir'和'ftok'函数存在'safemode绕过问题，远程攻击者可以利用漏洞在未授权位置检测文件是否存在等敏感信息。 问题代码如下： - --- PHPFUNCTIONchdir char str; int ret, strlen; if zendparseparametersZENDNUMARGS TSRMLSCC, "s", &str, &strlen == FAILURE RETURNFALS...

cmsWorks 2.2 RC4 (mod_root) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== cmsWorks 2.2 RC4 modroot Remote File Inclusion Vulnerability ===============================================================...

cmsWorks 2.2 RC4 (fckeditor) Remote Arbitrary File Upload Exploit

No description provided by source. ?php / ----------------------------------------------------------------- cmsWorks 2.2 RC4 fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- discovered by Stack exploited by ..: EgiX special thnx to...

cmsworks-rfi.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

cmsWorks 2.2 RC4 (fckeditor) Remote Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ================================================================= cmsWorks 2.2 RC4 fckeditor Remote Arbitrary File Upload Exploit =================================================================...