342 matches found
Pragyan CMS 2.6.4 - 'search.php' Remote File Inclusion
Author: Author: Mr.SeCreT E-mail: [email protected] From: Syria Greeting To: Milw0rm Script Information: Scipt: Pragyan CMS 2.6.4 Search.php Remote File Inclusion Vulnerability Language: PHP Download: http://garr.dl.sourceforge.net/project/pragyan/pragyan/2.6.4/pragyan-2.6.4.tar.gz registerglobals...
phpMyAdmin 2.6.4 Pl3以前版本本地文件包含漏洞
No description provided by source...
PHPList远程文件包含漏洞
BUGTRAQ: 9046 PHPlist是一款由PHP编写的时事通讯应用程序。 PHPlist由于不充分过滤用户提交的请求，远程攻击者可以利用这个漏洞包含远程服务器上的恶意PHP文件，以WEB权限执行。 PHPlist 2.6.2 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 如果使用Apache，使用.htaccess文件限制"admin"目录访问： FilesMatch ".php|inc$" Order allow,deny deny from all /FilesMatch FilesMatch "index.php$" Order...
CVE-2009-1480
Pragyan CMS 2.6.4 is affected by a SQL injection in index.php. The vulnerability is triggered via the fileget parameter in a view action and other vectors, enabling remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the documents, and there is no remediat...
Pragyan CMS 2.6.4 SQL Injection
Salvatore "drosophila" Fresta + Application: Pragyan CMS + Version: 2.6.4 + Website: http://www.pragyan.org + Bugs: A Multiple SQL Injection + Exploitation: Remote + Date: 22 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...
Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities
No description provided by source. Salvatore "drosophila" Fresta + Application: Pragyan CMS + Version: 2.6.4 + Website: http://www.pragyan.org + Bugs: A Multiple SQL Injection + Exploitation: Remote + Date: 22 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila...
Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities ======================================================== Salvatore "drosophila" Fresta + Application: Pragyan CMS + Version:...
Pragyan CMS 2.6.4 - Multiple SQL Injections
Pragyan CMS 2.6.4 - Multiple SQL Injections Salvatore "drosophila" Fresta + Application: Pragyan CMS + Version: 2.6.4 + Website: http://www.pragyan.org + Bugs: A Multiple SQL Injection + Exploitation: Remote + Date: 22 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...
Pragyan CMS 2.6.4 - Multiple SQL Injections
Salvatore "drosophila" Fresta + Application: Pragyan CMS + Version: 2.6.4 + Website: http://www.pragyan.org + Bugs: A Multiple SQL Injection + Exploitation: Remote + Date: 22 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...
CVE-2008-1142
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that th...
CVE-2008-1142
rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected. NOTE: realistic attack scenarios require that th...
Cross site scripting
Cross-site scripting XSS vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name...
CVE-2006-2307
CVE-2006-2307 describes a cross-site scripting (XSS) vulnerability in Website Baker CMS prior to 2.6.4. The issue allows remote attackers to inject arbitrary web script or HTML via a user display name. The provided connected documents confirm the vendor/product and the vulnerable version range, a...
CVE-2005-3787
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.6.4-pl4 allow remote attackers to inject arbitrary web script or HTML via 1 the cookie-based login panel, 2 the title parameter and 3 the table creation dialog...
CVE-2005-3301
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbitrary web script or HTML via certain arguments to 1 left.php, 2 queryframe.php, or 3 serverdatabases.php...
CVE-2005-3301
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.6.4-pl3 allow remote attackers to inject arbitrary web script or HTML via certain arguments to 1 left.php, 2 queryframe.php, or 3 serverdatabases.php...
PT-2005-4110
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 2.6.4 through 2.6.4-pl1 Description The issue allows remote attackers to include local files via the redirect parameter, possibly involving the subform array. This could potentially lead to unauthorized access to sensitive...
Local file inclusion vulnerability
PMASA-2005-4 Announcement-ID: PMASA-2005-4 Date: 2005-10-11 Summary Local file inclusion vulnerability Description In libraries/grabglobals.lib.php, the $$redirect parameter was not correctly validated, opening the door to a local file inclusion attack. Severity We consider this vulnerability to ...
phpMyAdmin 2.6.4-pl1 Remote Directory Traversal Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; SecurityReason.com TEAM Maksymilian Arciemowicz cXIb8O3 [email protected] Local file inclusion ./$FILE simple exploit phpMyAdmin 2.6.4-pl1 SecurityReason.com if @ARGV 3 print "\r\n SecurityReason TEAM\r\n"; print "cXIb8O3...
