Pluck Local File inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: Pluck Local File inclusion Vendor: http://www.pluck-cms.org Bug: Local File Inclusion Vulnerable Version: 4.5.1 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: Pluck is a content management...

CVE-2008-2993

CVE-2008-2993 affects FOG Forum 0.8.1. The vulnerability is a directory-traversal in index.php allowing remote attackers to include and execute arbitrary local files by manipulating the dot-dot (..) in parameters (fog_lang, fog_skin) and possibly (fog_pseudo, fog_posted, fog_password, fog_cook), ...

Quate CMS多个输入验证漏洞

BUGTRAQ ID: 29348 Quate CMS是运行在PHP和MySQL上的网站内容管理系统。 Quate CMS的多个模块没有正确验证用户提供的输入，可能导致跨站脚本攻击、泄露敏感信息或入侵有漏洞的系统。 1 当bypassinstalled设置为1的时候，admin/includes/header.php文件中没有正确地验证对securepagepath参数的输入便用于包含文件： if $bypassinstalled != 1 if !isfile"../includes/installed" ... require"../includes/simplegui.php";...

Debian: Security Advisory (DSA-1519-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1519-1 (horde3)

The remote host is missing an update to horde3 announced via advisory DSA 1519-1. OpenVAS Vulnerability Test $Id: deb15191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1519-1 horde3 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1519-1 : horde3 - insufficient input sanitising

It was discovered that the Horde web application framework permits arbitrary file inclusion by a remote attacker through the theme preference parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 1519-1] New horde3 packages fix information disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1519-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 15, 2008 http://www.debian.org/security/faq -...

DSA-1519-1 horde3 - information disclosure

Bulletin has no description...

CVE-2008-1325

Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pageid and 2 language parameters. NOTE: this might be the same issue as CVE-2008-1324...

Fedora 7 : horde-3.1.7-1.fc7 (2008-2406)

Fix arbitrary file inclusion through abuse of the theme preference. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : horde-3.1.7-1.fc8 (2008-2362)

Fix arbitrary file inclusion through abuse of the theme preference. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

horde316-inclusion.txt

Horde 3.1.6 arbitrary file inclusion vulnerability, proof of concept & patch. A severe security vulnerability affects any unix distribution running version 3.1.6 of the Horde webmail client included in most popular webhosting control panels. All previous versions are also affected and it is...

Debian Security Advisory DSA 897-1 (phpsysinfo)

The remote host is missing an update to phpsysinfo announced via advisory DSA 897-1. Several vulnerabilities have been discovered in phpsysinfo, a PHP based host information application. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-0870 Maksymilian...

Debian Security Advisory DSA 899-1 (egroupware)

The remote host is missing an update to egroupware announced via advisory DSA 899-1. Several vulnerabilities have been discovered in egroupware, a web-based groupware suite. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-0870 Maksymilian Arciemowicz...

CVE-2007-6624

The CVE-2007-6624 issue is a directory traversal/local file inclusion vulnerability in PNphpBB2 1.2i and earlier, exploitable via a .. in the phpEx parameter of printview.php. The active impact is indicated as partial confidentiality, integrity, and availability (CVSS v2 base score 6.8). The vuln...

CVE-2007-6584

1024 CMS 1.3.1 is affected by multiple directory traversal vulnerabilities that allow remote attackers to include and execute arbitrary local files via ../ in specific parameters (lang, theme_dir, admin_theme_dir) across several pages (news.php, search.php, download.php, forum.php, etc.). The not...

CVE-2007-6344

The CVE-2007-6344 issue affects Mcms Easy Web Make 1.3, where a directory traversal vulnerability in modules/cms/index.php allows remote inclusion and execution of local files via a .. in the template parameter. This enables an attacker to trigger arbitrary local file reads/executes on affected i...

CVE-2007-1539

Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to include arbitrary files via a .. dot dot sequence in the modulename parameter, as demonstrated via a static PHP code injection attack in an Apache log file...

CVE-2007-0637

Directory traversal vulnerability in zdnumer.php in Galeria Zdjec 3.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the galeria parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included ...

EUVD-2007-0339

Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skinnn parameter, as demonstrated by invoking kg.php with a postek parameter containing PHP code, which is injected into a fi...