115 matches found
PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Vulnerability
------------------------------------------------------------------- PmWiki = 2.2.34 pagelist Remote PHP Code Injection Vulnerability ------------------------------------------------------------------- author...............: Egidio Romano aka EgiX mail.................: n0b0d13satgmaildotcom...
PmWiki 2.2.34 - pagelist Remote PHP Code Injection (1)
PmWiki 2.2.34 - pagelist Remote PHP Code Injection 1 $r 454. if @$PageListSortCmp$o 455. $code .= "$c = $PageListSortCmp$o; "; 456. else 457. $code .= "$c = @strcasecmp$PCache$x'$o',$PCache$y'$o'; "; 458. $code .= "if $c return $r$c;\n"; 459. 460. StopWatch'PageListSort sort'; 461. if $code...
CVE-2011-4453
creationtimestamp| type| source ---|---|--- 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18149 2011-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18243 2018-05-29 15:50:33+00:00| seen|...
PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Exploit
Exploit for php platform in category web applications $r 454. if @$PageListSortCmp$o 455. $code .= "$c = $PageListSortCmp$o; "; 456. else 457. $code .= "$c = @strcasecmp$PCache$x'$o',$PCache$y'$o'; "; 458. $code .= "if $c return $r$c;\n"; 459. 460. StopWatch'PageListSort sort'; 461. if...
PmWiki pagelist.php Remote PHP Code Injection Exploit
This module exploits an arbitrary command execution vulnerability in PmWiki from 2.0.0 to 2.2.34. The vulnerable function is inside /scripts/pagelist.php. Module Options msf use exploit/multi/http/pmwiki/pagelist msf undefinedpagelist show actions ...actions... msf undefinedpagelist set ACTION ms...
CVE-2010-4453
CVE-2010-4453 affects Oracle WebLogic Server as part of Oracle Fusion Middleware (versions 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, 10.3.3). The vulnerability is described as unspecified remote impact to integrity via unknown vectors related to the Servlet Container. The available documenta...
CVE-2009-4453
The CVE-2009-4453 issue affects SoftCab Sound Converter ActiveX control (sndConverter.ocx) version 1.2. The vulnerability stems from an insecure SaveFormat method that enables remote attackers to create or overwrite arbitrary files. This is documented across CVE/NVD entries as an insecure method ...
CVE-2008-4453
creationtimestamp| type| source ---|---|--- 2008-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6638...
SuSE 10 Security Update : Mono (ZYPP Patch Number 4453)
This update fixes a buffer overflow in Mono's BigInteger implementation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29389; scriptversion"1.17";...
CVE-2007-4453
CVE-2007-4453 affects vBulletin 3.6.8 and involves multiple reflected XSS vulnerabilities in PHP pages. The issue allows an attacker to inject arbitrary HTML/JS via the s parameter to index.php and the q parameter to files including faq.php, member.php, memberlist.php, calendar.php, search.php, f...
CVE-2006-4453
Cross-site scripting XSS vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "table markups"...
CVE-2006-4453
PmWiki before 2.1.18 contains a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving “table markups.” The issue is documented under CVE-2006-4453 with a CVSS v2 base score of 4.3 (Medium) and an attack vecto...
CVE-2005-4453
CVE-2005-4453 concerns Ultraapps Issue Manager prior to 2.1. A remote authenticated user can gain administrator privileges by tampering with parameters in UserProfile.aspx (p_User_user_id and User_user_id) and then modifying the password field. No patch or remediation details are provided in the ...
CVE-2005-4453
UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original 1 pUseruserid and 2 Useruserid parameters to UserProfile.aspx, then modifying the password field...
