CVE-2007-1787

Softerra Time-Assistant 6.2 and earlier is affected by CVE-2007-1787 through multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php when register_globals is enabled. An attacker can cause remote PHP code execution by supplying a URL in the (1) inc_dir or (2) lib_dir paramet...

CVE-2007-1787

Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 incdir or 2 libdir parameter...

[ECHO_ADV_80$2007] Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vulnerability

----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vuln

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability...

Softerra Time-Assistant &lt;= 6.2 (inc_dir) Remote File Inclusion Vuln

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion...

Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications =================================================================== Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vuln =================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \...

Softerra Time-Assistant 6.2 - inc_dir Remote File Inclusion

Softerra Time-Assistant 6.2 - incdir Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir...

Softerra Time-Assistant 6.2 - 'inc_dir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability...

CVE-2006-6490

The CVE-2006-6490 issue affects Symantec/Norton consumer products that ship the SupportSoft ActiveX controls SmartIssue tgctlsi.dll and ScriptRunner tgctlsr.dll. The vulnerability is described as multiple stack/heap buffer overflows in these ActiveX controls, which could allow remote code executi...

CVE-2007-0867

PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathsversion parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathsversion parameter...

CVE-2007-0867

PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathsversion parameter...

CVE-2007-0867

CVE-2007-0867 affects Site-Assistant: PHP remote file inclusion in classes/menu.php (Site-Assistant 0990 and earlier) allows an attacker to execute arbitrary PHP code via a URL supplied in the paths[version] parameter. Root cause is improper handling of user-controlled input enabling RFI. The lin...

Site-Assistant &lt;= v0990 (paths[version]) Remote File Include Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleSite-Assistant = v0990pathsversionRemote File Include Exploit/title script language="JavaScript"...

Site-Assistant 0990 - 'paths[version]' Remote File Inclusion

Site-Assistant //'=============================================================================================== //'Script Name: Site-Assistant //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basic exploit,but any time : var path="/classes...

Site-Assistant 0990 - paths[version] Remote File Inclusion

Site-Assistant 0990 - pathsversion Remote File Inclusion Site-Assistant //'=============================================================================================== //'Script Name: Site-Assistant //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey...

Site-Assistant <= v0990 (paths[version]) Remote File Include Exploit

Exploit for unknown platform in category web applications ==================================================================== Site-Assistant Site-Assistant //'=============================================================================================== //'Script Name: Site-Assistant //'...

CA BrightStor ARCserve (lgserver.exe) Remote Stack Overflow Exploit

No description provided by source. !/usr/bin/python Remote exploit for the CA BrightStor Arcserve stack overflow as described in http://www.securityfocus.com/archive/1/458648/30/0/threaded Winny Thomas ;- Author shall bear no responsibility for any screw ups caused by using this code import os...

No command prompt elevation of privilege-vulnerability warning-the black bar safety net

There are many of my friends asked him to get a WEBSHELL,but want to use the command prompt to view the user information or something,but a lot of hosts limit the execution of the command,so a lot of WEBSHELL will not lose a lot of functionality...... I went to the ASP webmaster assistant 6. 0, f...

Unfixed XSS vulnerability at www.sportdog.gr

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.sportdog.gr, which at the time of submission ranked 18014 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...