654 matches found
PHPGedView.php.txt
--- PHPGedView password: nothing now in log file we have: 2005.12.20 13:16:06 - 127.0.0.1 - Login Failed - - so you can launch operating system commands: http://target/path/helptextvars.php?cmd=ls%20-la&PGVBASEDIRECTORY=./index/pgv-200512.log generally:...
McGallery 1.0/1.1/2.2 - 'index.php?album' SQL Injection
source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of...
CVE-2005-4074: Undefined Security Weakness
Directory traversal vulnerability in index.cfm in CFNuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to include arbitrary local .cfm files via a .. dot dot in the 1 sector or 2 page parameters...
phpmyadmin -- register_globals emulation "import_blacklist" manipulation
Secunia reports: Stefan Esser has reported a vulnerability in phpMyAdmin, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and compromise a vulnerable system. The vulnerability is caused due to an error in the registerglobals...
[SECURITY] [DSA 910-1] New zope2.7 packages fix arbitrary file inclusion
-------------------------------------------------------------------------- Debian Security Advisory DSA 910-1 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2005 http://www.debian.org/security/faq -...
CVE-2005-3347: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egrouwpware before 1.0.0.009, allow remote attackers to include arbitrary files via .. dot dot sequences in the 1 sensorprogram parameter or the 2...
[SECURITY] [DSA 899-1] New egroupware packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 899-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2005 http://www.debian.org/security/faq -...
Hardened-PHP Project Security Advisory 2005-21.81
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in phpSysInfo Release Date: 2005/11/13 Last Modified: 2005/11/12 Author: Christopher Kunz Application: phpSysInfo 2.4 and prior Severity: Cross-Site...
CVE-2005-3507: Undefined Security Weakness
Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges via "../" sequences in the template parameter to 1 showarchives.php and 2 shownews.php...
CuteNews1.4.1.txt
CuteNews 1.4.1 Arbitrary file inclusion / remote code execution exploit software: site: http://cutephp.com/ description: "Cute news is a powerful and easy for using news management system that use flat files to store its database. It supports comments, archives, search function, image uploading,...
CuteNews 1.4.1 remote code execution
CuteNews 1.4.1 Arbitrary file inclusion / remote code execution exploit software: site: http://cutephp.com/ description: "Cute news is a powerful and easy for using news management system that use flat files to store its database. It supports comments, archives, search function, image uploading,...
CVE-2005-3323
docutils in Zope 2.6, 2.7 before 2.7.8, and 2.8 before 2.8.2 allows remote attackers to include arbitrary files via include directives in RestructuredText functionality...
CVE-2005-3323
CVE-2005-3323 affects docutils in Zope: Zope 2.6, Zope 2.7 before 2.7.8, and Zope 2.8 before 2.8.2 are vulnerable. The flaw allows remote attackers to include arbitrary files via include directives in RestructuredText functionality. Root cause: insecure handling of include directives in docutils ...
CVE-2005-3300: Undefined Security Weakness
The registerglobals emulation layer in grabglobals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the FILES array for uploaded files, which allows remote attackers to include arbitrary files by using direct requests to library scripts that do not use...
CVE-2005-3133: Undefined Security Weakness
Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to 1 delete arbitrary files or directories via a relative path to the id parameter to logout.html or 2 include arbitrary PHP files or other...
SaveWebPortal <= 3.4 Multiple Vulnerabilities
The remote host is running SaveWebPortal, a PHP web portal application. The installed version of SaveWebPortal is prone to multiple vulnerabilities, including remote code execution, arbitrary file inclusion, and cross-site scripting XSS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
phpLDAPadmin 0.9.6/0.9.7 - 'welcome.php' Arbitrary File Inclusion
source: https://www.securityfocus.com/bid/14695/info phpldapadmin is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpldapadmin is prone to a directory traversal vulnerability. An attacker can...
CVE-2005-2635: Undefined Security Weakness
Multiple directory traversal vulnerabilities in phpAdsNew and phpPgAds before 2.0.6 allow remote attackers to include arbitrary files via a .. dot dot in the 1 layerstyle parameter to adlayer.php or 2 language parameter to js-form.php...
CVE-2005-2573: Undefined Security Weakness
The mysqlcreatefunction function in sqludf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash \ character...
[SA16434] ezUpload "path" Arbitrary File Inclusion Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...