326 matches found
PHP 5.2.11 / 5.3.0 symlink() open_basedir Bypass
This is exploit from Security Audit Lab - SecurityReason labs. Author : Maksymilian Arciemowicz Script for legal use only. PHP 5.2.11 5.3.0 symlink openbasedir bypass More: SecurityReason '; ifempty$file exit; if!iswritable"." die"not writable directory"; $level=0; for$as=0;$as$fakedep;$as++...
PHP 5.3.0 pdflib file disclosure
Exploit for unknown platform in category web applications ================================ PHP 5.3.0 pdflib file disclosure ================================ Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- ...
PHP 5.3.0 pdflib file disclosure
No description provided by source. Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- ?php // Author : Sina Yazdanmehr R3d.W0rm ; Our Site : http://IrCrash.com if!extensionloaded'pdf' die'pdf extension requir...
PHP 5.3.0 pdflib Arbitrary File Write
Exploit for unknown platform in category local exploits ===================================== PHP 5.3.0 pdflib Arbitrary File Write ===================================== Title: PHP 5.3.0 pdflib Arbitrary File Write CVE-ID: OSVDB-ID: Author: Sina Yazdanmehr Published: 2009-11-06 Verified: yes view...
PHP 5.3.0 pdflib Arbitrary File Write
No description provided by source. Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- ?php // Author : Sina Yazdanmehr R3d.W0rm ; Our Site : http://IrCrash.com if!extensionloaded'pdf' die'pdf extension requir...
PHP 5.2.x < 5.2.12, 5.3.0 Buffer Overflow Vulnerability
PHP is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...
[ MDVSA-2009:284 ] gd
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:284 http://www.mandriva.com/security/ Package : gd Date : October 20, 2009 Affected: 2009.0, 2009.1, Corporate 3.0, Corporate 4.0, Enterprise Server 5.0, Multi Network Firewall 2.0 Problem Description: A...
PHP 5.3.0 open_basedir Bypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.0 main.c openbasedir bypass Author: Maksymilian Arciemowicz http://SecurityReason.com Date: - - - Dis.: 26.05.2009 - - - Pub.: 06.08.2009 Risk: Medium Affected Software: PHP 5.3.0 Original URL:...
PHP 5.3 - 'mail.log' Configuration Option 'open_basedir' Restriction Bypass
source: https://www.securityfocus.com/bid/36007/info PHP is prone to an 'openbasedir' restriction-bypass vulnerability because of a design error. Successful exploits could allow an attacker to write files in unauthorized locations. This vulnerability would be an issue in shared-hosting...
CVE-2007-6717
Buffer overflow in tftp in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to gain privileges via unspecified vectors...
IBM AIX <= 5.3.0 setlocale() Local Privilege Escalation Exploit
No description provided by source. setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccddddx2fxf2x28x2f" egg="x60"2350 shellcode= by intropy at caughq.org "x7cxa5x2ax79" xor. r5,r5,r5 "x40x82xffxfd" bnel shellcode "x7fxe8x02xa6" mflr r31...
IBM AIX 5.3.0 - 'setlocale()' Local Privilege Escalation
setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccdddd\x2f\xf2\x28\x2f" egg="\x60"2350 shellcode= by intropy caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel "\x7f\xe8\x02\xa6" mflr r31 "\x3b\xff\x01\x20" cal...
Stack overflow
Stack-based buffer overflow in the odmsearchpath function in libodm in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code via a long ODMPATH environment variable...
CVE-2007-2995
Unspecified vulnerability in sysmgt.websm.rte in IBM AIX 5.2.0 and 5.3.0 has unknown impact and attack vectors...
CVE-2007-0618
Unspecified vulnerability in 1 pop3d, 2 pop3ds, 3 imapd, and 4 imapds in IBM AIX 5.3.0 has unspecified impact and attack vectors, involving an "authentication vulnerability."...
CVE-2007-0618
Unspecified vulnerability in 1 pop3d, 2 pop3ds, 3 imapd, and 4 imapds in IBM AIX 5.3.0 has unspecified impact and attack vectors, involving an "authentication vulnerability."...
Indexu 5.05.3 - upgrade.php?gateway Cross-Site Scripting
Indexu 5.05.3 - upgrade.php?gateway Cross-Site Scripting source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script...
Indexu 5.0/5.3 - 'upgrade.php?gateway' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in th...
Indexu 5.0/5.3 - 'Sendmail.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in th...
CVE-2006-5009
Unspecified vulnerability in xlock in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary commands and overwrite arbitrary files via unspecified vectors, possibly involving a buffer overflow...