Six Apart Movable Type < 5.2.6 Arbitrary Code Execution Vulnerability

Six Apart Movable Type is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

AContent 1.3 - Local File Inclusion

No description provided by source. Exploit Title: AContent 1.3 Local File Inclusion Date: 21-03-2013 Author: DaOne Vendor Homepage: http://atutor.ca/acontent/ Software Link: https://sourceforge.net/projects/acontent/files/AContent-1.3.tar.gz/download Category: webapps/php Version: 1.3 Tested on:...

PHP 5.2.6 'create_function()' Code Injection Weakness (1)

No description provided by source. source: http://www.securityfocus.com/bid/31398/info PHP is prone to a code-injection weakness because it fails to sufficiently sanitize input to 'createfunction'. Note that the anonymous function returned need not be called for the supplied code to be executed. ...

ACal 2.2.6 Local File Inclusion

Exploit Title: ACal 2.2.6 Local File Inclusion Vulneberality Google Dork: - Date: 15/08/2013 Exploit Author: ICheerNo0M - http://icheernoom.blogspot.com/ Vendor Homepage: http://acalproj.sourceforge.net/ Software Link: http://prdownloads.sourceforge.net/acalproj/ACal-2.2.6.tar.gz?download Version...

w-CMS 2.0.1 - Remote Code Execution

w-CMS 2.0.1 - Remote Code Execution Exploit Title: w-CMS 2.0.1 Remote Code Execution Vulnerability Google Dork: intext:"Powered by w-CMS" Date: 15/08/2013 Exploit Author: ICheerNo0M - http://icheernoom.blogspot.com/ Vendor Homepage: http://w-cms.org/ Software Link: - Version: 2.0.1 Tested on:...

w-CMS 2.0.1 - Remote Code Execution

Exploit Title: w-CMS 2.0.1 Remote Code Execution Vulnerability Google Dork: intext:"Powered by w-CMS" Date: 15/08/2013 Exploit Author: ICheerNo0M - http://icheernoom.blogspot.com/ Vendor Homepage: http://w-cms.org/ Software Link: - Version: 2.0.1 Tested on: Windows 7 + PHP 5.2.6 --- Vuln Code :...

w-CMS 2.0.1 Remote Code Execution

Exploit Title: w-CMS 2.0.1 Remote Code Execution Vulnerability Google Dork: intext:"Powered by w-CMS" Date: 15/08/2013 Exploit Author: ICheerNo0M - http://icheernoom.blogspot.com/ Vendor Homepage: http://w-cms.org/ Software Link: - Version: 2.0.1 Tested on: Windows 7 + PHP 5.2.6 --- Vuln Code :...

AContent 1.3 Local File Inclusion

Exploit for php platform in category web applications Exploit Title: AContent 1.3 Local File Inclusion Date: 21-03-2013 Author: DaOne aka Mocking Bird Vendor Homepage: http://atutor.ca/acontent/ Software Link: https://sourceforge.net/projects/acontent/files/AContent-1.3.tar.gz/download Category:...

AContent 1.3 Local File Inclusion

Exploit Title: AContent 1.3 Local File Inclusion Date: 21-03-2013 Author: DaOne Vendor Homepage: http://atutor.ca/acontent/ Software Link: https://sourceforge.net/projects/acontent/files/AContent-1.3.tar.gz/download Category: webapps/php Version: 1.3 Tested on: Apache/2.2.8Win32 PHP/5.2.6 Exploit...

Slash CMS - Multiple Vulnerabilities

Exploit Title: Slash CMS Multiple Vulnerabilities Date: 21-03-2013 Author: DaOne aka Mocking Bird Vendor Homepage: http://www.slash-cms.com/ Software Link: http://sourceforge.net/projects/slashcms/ Category: webapps/php Google Dork: "N/A" Tested on: Apache/2.2.8Win32 PHP/5.2.6 File Upload: Upload...

Radius Manager 3.9.0 SQL Injection

Exploit Title: Radius Manager V3.9.0 Sql Injection Date: 16-10-2011 Author: Mehdi Boukazoula Software Link: http://www.dmasoftlab.com Version: v 3.9.0 Tested on: v 3.9.0 with Postgresql, PHP 5.2.6, Apache 2.2.8, Description : In the page of "http://127.0.0.1/admin.php" the parameter "cont" is not...

PHP <5.2.6 cgi_main.c URI 安全模式绕过漏洞

No description provided by source...

PHP 4.x,5.2.6 dba_replace函数拒绝服务漏洞

No description provided by source...

PHP5.2.6 (content.phpid) SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== PHP5.2.6 content.phpid SQL Injection Vulnerability ==================================================== Author : Amine92 home : http://vbhacker.net/ Dork : "Powered by PHP/5.2.6" Download Pa...

DSA-2018-1 php5 - null pointer dereference

Bulletin has no description...

DSA-2001-1 php5 - multiple vulnerabilities

Bulletin has no description...

Mandriva Linux Security Advisory : php (MDVSA-2009:247)

Multiple vulnerabilities was discovered and corrected in php : The dbareplace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service file truncation via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the...

php safe mode bypass all-vulnerability warning-the black bar safety net

Sources:vul. kr PHP safe mode bypass from 4. x to 5. x all. Functions: mbsendmail curlinit imapopen mail ioncubereadfile posixgetpwuid errorlog extensionloaded copy procopen A php code safe-mode-bypass.php for you: Some New Virus: PHP 5.2.4 ionCube extension safemode and disablefunctions...

Design/Logic Flaw

The dbareplace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service file truncation via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the attacker can modify or add database entries but does not have...

Mandrake Security Advisory MDVSA-2009:167 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:167. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...