Default credentials

config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to access the application via a login action to admin.php. NOTE: this can be leveraged to upload and execute arbitrary code...

CVE-2007-3140

CVE-2007-3140 : SQL injection in WordPress 2.2 affecting the xmlrpc.php module. The vulnerability arises in the XML-RPC method wp.suggestCategories, where an input value is not properly sanitized and can be exploited by an authenticated user to execute arbitrary SQL commands. Exploitation notes i...

CVE-2007-3139

The CVE-2007-3139 entry applies to Quick.Cart versions 2.2 and earlier. According to connected records, the root cause is in config/general.php where a default username and password are used, permitting remote attackers to authenticate via an admin.php login action. The practical consequence is t...

WordPress 2.2 - Request_URI Cross-Site Scripting

WordPress 2.2 - RequestURI Cross-Site Scripting source: https://www.securityfocus.com/bid/24383/info WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

WordPress Core 2.2 - 'Request_URI' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24383/info WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user. This...

WordPress Core 2.2 - 'xmlrpc.php' SQL Injection

/ El error, bastante tonto por cierto, se encuentra en la función wpsuggestCategories, en el archivo xmlrpc.php: function wpsuggestCategories$args global $wpdb; $this-escape$args; $blogid = int $args0; $username = $args1; $password = $args2; $category = $args3; $maxresults = $args4;...

PHP EXT/Session HTTP应答头注入漏洞

PHP是一款广泛使用的WEB开发脚本语言。 PHP的ext/session在置于会话COOKIE前没有URL编码会话ID，远程攻击者可以利用漏洞可以对会话COOKIE进行注入攻击。 当PHP' ext/session调用sessionstart，会在部分情况下发送新会话COOKIE，这些情况如下： - session id嵌入到PATHINFO - session id重生成 - session id通过sessionid设置 - sessionstart多次调用...

Quick.Cart 2.2 - LocalRemote File Inclusion Remote Code Execution

Quick.Cart 2.2 - LocalRemote File Inclusion Remote Code Execution ?php / Exploit Name: Quick.Cart = v2.2 Remote Local Include Exploit & Remote Code Execution Exploit Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Kacper Hacking & Security Blog:...

Quick.Cart <= 2.2 RFI/LFI Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================= Quick.Cart 126...

CVE-2007-2711

Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long string to TCP port 113...

Code injection

admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the del parameter...

CVE-2007-2350

The CVE concerns admin/config.php in the music-on-hold module of freePBX 2.2.x. It allows a remote authenticated administrator to execute arbitrary commands via shell metacharacters in the del parameter, indicating input handling/sanitization flaws in that file. Impact is potential remote command...

Remote file inclusion

PHP remote file inclusion vulnerability in editor.php in HTMLeditbox 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the settingsappdir parameter...

CVE-2007-2327

PHP remote file inclusion vulnerability in editor.php in HTMLeditbox 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the settingsappdir parameter...

CVE-2007-2327

CVE-2007-2327 affects HTMLeditbox 2.2. The vulnerability is a PHP remote file inclusion in _editor.php triggered by a URL in settings[app_dir], allowing remote code execution. Root cause is improper handling of the app_dir parameter enabling inclusion of attacker-controlled PHP. Exploitation deta...

HTMLEditBox 2.2 - config.php Remote File Inclusion

HTMLEditBox 2.2 - config.php Remote File Inclusion source: https://www.securityfocus.com/bid/23664/info htmlEditbox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this vulnerability to execute malicious PHP cod...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web script or HTML via the 1 From, 2 To, 3 Call-ID, 4 User-Agent, and unspecified other SIP protocol fields, which are stored in /var/log/asterisk/full and displayed by...

CVE-2007-2191

CVE-2007-2191 describes multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.2.x . The flaws allow remote attackers to inject arbitrary web script or HTML via SIP-related fields (1) From, (2) To, (3) Call-ID, (4) User-Agent, and potentially other SIP headers, with the malicious data s...

Remote file inclusion

PHP remote file inclusion vulnerability in mutantfunctions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-1961

PHP remote file inclusion vulnerability in mutantfunctions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...