Viscosity setuid-set ViscosityHelper Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

php-Charts 'url.php'任意PHP代码执行漏洞

BUGTRAQ ID: 57448 php-Charts是PHP图表和绘图组件，为Web应用呈现动态的、数据驱动的、HTML5图表。 php-Charts 1.0及其他版本没有正确验证 wizard/url.php 内的GET参数值，即用在 "eval" 调用内，可被利用执行任意PHP代码。 0 php-Charts 1.x 厂商补丁： php-Charts ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://phpchart.net/...

php-Charts 1.0 Arbitrary PHP Code Execution Vulnerability

This Metasploit module exploits a PHP code execution vulnerability in php-Charts version 1.0 which could be abused to allow users to execute arbitrary PHP code under the context of the webserver user. The 'url.php' script calls eval with user controlled data from any HTTP GET parameter name. This...

tinybrowser - type Cross-Site Scripting

tinybrowser - type Cross-Site Scripting source: https://www.securityfocus.com/bid/57230/info TinyBrowser is prone to multiple vulnerabilities. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser of an unsuspecting...

gleamtech filevistafileultimate 4.6 - Directory Traversal

gleamtech filevistafileultimate 4.6 - Directory Traversal Hello I have recently released this vulnerability in a talk: http://soroush.secproject.com/blog/2012/11/file-in-the-hole/ - Title: GleamtechFileVista/FileUltimate 4.6 Directory Traversal can lead to file upload attack - Credit goes to:...

asaanCart <= 0.9 Multiple Vulnerabilities - Active Check

asaanCart is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2012-1671

CVE-2012-1671 concerns a directory traversal vulnerability in the phpPaleo application. The issue affects phpPaleo 4.8b155 and earlier, where an attacker can abuse the lang parameter in index.php to cause Local File Inclusion, potentially enabling arbitrary local code execution. The connected doc...

CVE-2012-4997

Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...

West Wind Web Connection Unprotected Configuration Editor Application

The remote host is running a web application that utilizes the West Wind Web Connection framework. Nessus was able to access the West Wind Web Connection framework configuration file editor without providing credentials. The configuration file editor allows remote configuration of the application...

CVE-2011-5139

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-3965

The CVE-2012-3965 entry affects Mozilla Firefox (pre-15.0) where navigation to about:newtab wasn’t properly restricted, enabling a crafted site that opens a new tab and then a new window to execute JavaScript with chrome privileges. Connected advisories (openSUSE/SUSE) tie this to MFSA 2012-60 an...

GalaxyScripts Mini File Host and DaddyScripts Daddy's File Host - Local File Inclusion

source: https://www.securityfocus.com/bid/54992/info GalaxyScripts Mini File Host and DaddyScripts Daddy's File Host are prone to a local file-include vulnerability because they fail to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensiti...

Scientific Linux Security Update : openoffice.org, hsqldb on SL5.x i386/x86_64

It was discovered that HSQLDB could allow the execution of arbitrary public static Java methods. A carefully crafted odb file opened in OpenOffice.org Base could execute arbitrary commands with the permissions of the user running OpenOffice.org. CVE-2007-4575 It was discovered that HSQLDB did not...

ThinkPhp web框架 php代码任意执行漏洞

No description provided by source...

Executable File Embedded in JPEG File Vulnerabilities

An arbitrary file execution vulnerability has been reported in JPEG files...

CVE-2011-3831

SQL injection vulnerability in incidentattachments.php in Support Incident Tracker aka SiT! 3.65 allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name...

vBadvanced CMPS 3.2.2 - 'vba_cmps_include_bottom.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/51672/info vBadvanced CMPS is prone to a remote file-include vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to execute arbitrary local and remote scripts in the context...

miniCMS Multiple Remote PHP Code Injection Vulnerabilities

miniCMS is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary PHP code because the application fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Joomla! Component com_br - Controller Local File Inclusion

Joomla! Component combr - Controller Local File Inclusion source: https://www.securityfocus.com/bid/51613/info The 'combr' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

Joomla! Component com_br - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/51613/info The 'combr' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute...