395 matches found
WordPress Plugin Link Library 5.2.1 - SQL Injection
WordPress Plugin Link Library 5.2.1 - SQL Injection Exploit Title: WordPress Link Library plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ./link-library-ajax.php: echo $mylinklibraryplugin-LinkLibrary...; ./link-library.php: class...
vtiger CRM 5.2.1 Local File Inclusion
------------------------------------------------------------------------ Software................vtiger CRM 5.2.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vtiger.com/ Discovery Date..........4/5/2011 Tested...
vtiger CRM 5.2.1 Cross Site Scripting
------------------------------------------------------------------------ Software................vtiger CRM 5.2.1 Vulnerability...........Reflected Cross-site Scripting Threat Level............Critical 4/5 Download................http://www.vtiger.com/ Discovery Date..........4/5/2011 Tested...
Aardvark Topsites PHP 'index.php' Multiple Cross Site Scripting Vulnerabilities
This host is running Aardvark Topsites PHP CMS and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbaardvarktopsitesphpcmsxssvuln.nasl 5676 2017-03-22 16:29:37Z cfi $ Aardvark Topsites PHP 'index.php' Multiple Cross Site Scripting Vulnerabilities Authors: Antu...
CVE-2010-3910
Vuln summary (CVE-2010-3910): VTiger CRM up to version 5.2.0 is affected by local file inclusion and directory traversal issues in include/utils/utils.php (return_application_language) and in graph.php. An attacker can trigger LFI by manipulating language parameters (lang_crm in phprint.php and c...
CVE-2010-3911
Multiple cross-site scripting XSS vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via 1 the username aka defaultusername field or 2 the password field in a Users Login action to index.php, or 3 the label parameter in a Settings GetFieldInfo...
Aardvark Topsite XSS vulnerability
Hi, I found XSS on Aardvark Topsites PHP system. Dork: "Powered by Aardvark Topsites" "SQL Queries" XSS: sitepath/index.php?a=search&q=2220onmouseover3dalertString.fromCharCode88,83,8320par3d22 Can use POST to effect the "email", "title", "u" and "url" parameters either on the same way. Tested...
DEBIAN-CVE-2010-3087
LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TIFF image...
PHP 4.x < 4.4.5, 5.x < 5.2.1 Multiple Integer Overflow Vulnerabilities
PHP is prone to multiple integer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescriptio...
Linux Kernel 'fasync_helper()' Local Privilege Escalation Vulnerability
Exploit for linux platform in category local exploits ======================================================================= Linux Kernel 'fasynchelper' Local Privilege Escalation Vulnerability ======================================================================= Credit: Tavis Ormandy...
php 5.2.1 代码执行漏洞
No description provided by source...
php 5.2.1 msg-receive 整数溢出漏洞
No description provided by source...
php 5.2.1 代码执行漏洞
No description provided by source...
PHP 5.2.1 格式化字符串漏洞
No description provided by source...
CVE-2009-2302
Cross-site scripting XSS vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected...
Mandriva Linux Security Advisory : php (MDVSA-2008:126)
A number of vulnerabilities have been found and corrected in PHP : PHP 5.2.1 would allow context-dependent attackers to read portions of heap memory by executing certain scripts with a serialized data input string beginning with 'S:', which did not properly track the number of input bytes being...
Wordpress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit
Exploit for unknown platform in category web applications ============================================================== Wordpress 2.6.1 SQL Column Truncation Admin Takeover Exploit ============================================================== !/usr/bin/php =5.2.1 you'll need to be as well, in...
PHP Safe_mode bypass exploit (win32service)
?php PHP Safemode bypass exploit win32service Note: Tested on 5.2.1 Author: NetJackal Email: nima501atyahoodotcom Website: http://netjackal.by.ru Usage: http://victim.net/nj.php?CMD=command $command=isset$GET'CMD'?$GET'CMD':'dir'; cammand $dir=iniget'uploadtmpdir'; Directory to store command's...
CVE-2007-2748
The substrcount function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375...
CVE-2007-2727
The mcryptcreateiv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls phprandr with an uninitialized seed variable and therefore always generates the same initialization vector IV, which might allow context-dependent attackers to decrypt...