CVE-2017-6315

CVE-2017-6315 affects Sophos Astaro Security Gateway (ASG) v7. It permits unauthenticated remote code execution by sending a crafted request to the index.plx file. Several connected sources (NVD/CVELIST entries and exploit/public details) corroborate unauthenticated RCE via index.plx, highlightin...

Astaro Security Gateway 7 Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits !/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE:...

Astaro Security Gateway 7 Remote Code Execution

!/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE: CVE-2017-6315 import socket import sys import os import...

Astaro Security Gateway 7 - Remote Code Execution

Astaro Security Gateway 7 - Remote Code Execution !/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE:...

Astaro Security Gateway 7 - Remote Code Execution

!/usr/bin/python Astaro Security Gateway v7 - Unauthenticated Remote Code Execution Exploit Authors: Jakub Palaczynski and Maciej Grabiec Tested on versions: 7.500 and 7.506 Date: 13.12.2016 Vendor Homepage: https://www.sophos.com/ CVE: CVE-2017-6315 import socket import sys import os import...

Cross-Site Scripting (XSS) in Photo Gallery WordPress plugin

Advisory ID: HTB23232 Product: Photo Gallery WordPress plugin Vendor: http://web-dorado.com/ Vulnerable Versions: 1.1.30 and probably prior Tested Version: 1.1.30 Advisory Publication: September 10, 2014 without technical details Vendor Notification: September 10, 2014 Vendor Patch: September 10,...

CVE-2014-6315

CVE-2014-6315 concerns the WordPress plugin Photo Gallery (Web-Dorado) up to version 1.1.30. The vulnerability is a set of Cross-Site Scripting (XSS) flaws exposed via three HTTP GET/parameters to wp-admin/admin-ajax.php: callback, dir, and extensions. The root cause is insufficient sanitization ...

WordPress Photo Gallery 1.1.30 Cross Site Scripting Vulnerability

WordPress Photo Gallery plugin version 1.1.30 suffers from a cross site scripting vulnerability. Product: Photo Gallery WordPress plugin Vendor: http://web-dorado.com/ Vulnerable Versions: 1.1.30 and probably prior Tested Version: 1.1.30 Advisory Publication: September 10, 2014 without technical...

WordPress Photo Gallery 1.1.30 Cross Site Scripting

Advisory ID: HTB23232 Product: Photo Gallery WordPress plugin Vendor: http://web-dorado.com/ Vulnerable Versions: 1.1.30 and probably prior Tested Version: 1.1.30 Advisory Publication: September 10, 2014 without technical details Vendor Notification: September 10, 2014 Vendor Patch: September 10,...

Movable Type 4.2x, 4.3x Web Upgrade Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit4...

Movable Type 4.2x 4.3x Upgrade Script RCE Script Injection - Ver2 (CVE-2012-6315)

A script injection and execution vulnerability has been reported in Movable Type. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary Perl code and SQL commands on the affected system...

CVE-2013-6315

CVE-2013-6315 affects IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and 5.1.1 before 5.1.1.1-IER-IF003. The vulnerability stems from improper restriction of FRAME elements, enabling remote attackers to perform clickjacking via a crafted website. Impact is described as partial i...

CVE-2012-6315

CVE-2012-6315 is a reservation duplicate of CVE-2013-0209. The connected records show that Movable Type 4.2x–4.38 exposed an authentication gap in mt-upgrade.cgi’s database-migration functions, enabling an attacker to perform eval and SQL injections and potentially execute arbitrary Perl code rem...

CVE-2012-6315

creationtimestamp| type| source ---|---|--- 2013-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24321 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/movabletypeupgradeexec.rb 2025-02-06 03:13:41+00:00|...

SuSE 10 Security Update : poppler (ZYPP Patch Number 6315)

This update of poppler: fix various security bugs that occur while decoding JBIG2. CVE-2009-0146 / CVE-2009-0147 / CVE-2009-0165 / CVE-2009-0166 / CVE-2009-0799 / CVE-2009-0800 / CVE-2009-1179 / CVE-2009-1180 / CVE-2009-1181 / CVE-2009-1182 / CVE-2009-1183 Further a denial of service bug in...

CVE-2008-6315

CVE-2008-6315 describes a PHP remote file inclusion vulnerability in _conf/core/common-tpl-vars.php of PHPmyGallery 1.0 beta2, where an attacker can supply a URL in the confdir parameter to execute arbitrary PHP code remotely. Related entries cover a separate but similar issue (CVE-2008-6316 ) in...

CVE-2008-6315

creationtimestamp| type| source ---|---|--- 2008-12-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7392...

CVE-2007-6315

BarracudaDrive Web Server vulnerability CVE-2007-6315: before version 3.8, remote authenticated users can cause a crash (denial of service) by sending an HTTP request to /eh/chat.ehintf/C that lacks a Connection ID, leading to a NULL pointer dereference. Impact is a partial availability loss per ...