Lucene search
+L

61 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.27 views

Axiom Photo/News Gallery 0.8.6 - Remote File Include Exploit

No description provided by source. !/usr/bin/perl Axiom 0.8.6 photo gallery template.phpRemote File Include Vulnerability Bug Found : DeltahackingTEAM discovery:Dr.Pantagon & Exploitet By Dr.Trojan Class: Remote File Include Vulnerability exemplary Exp:...

7.1AI score
SaveExploits0
OSV
OSV
added 2014/01/28 12:55 a.m.10 views

DEBIAN-CVE-2014-1640

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...

3.3CVSS6.7AI score0.00313EPSS
SaveExploits0References1
NVD
NVD
added 2014/01/28 12:55 a.m.22 views

CVE-2014-1640

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...

3.3CVSS6.3AI score0.00313EPSS
SaveExploits0References5
OSV
OSV
added 2014/01/28 12:55 a.m.13 views

CVE-2014-1640

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...

6.6AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2014/01/28 12:55 a.m.31 views

CVE-2014-1640

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...

3.3CVSS6AI score0.00313EPSS
SaveExploits0References5
Prion
Prion
added 2014/01/28 12:55 a.m.22 views

Code injection

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...

3.3CVSS6.8AI score0.00313EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2014/01/28 12:0 a.m.36 views

CVE-2014-1640

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...

6.3AI score0.00313EPSS
SaveExploits0References5
CVE
CVE
added 2014/01/28 12:0 a.m.56 views

CVE-2014-1640

CVE-2014-1640 affects the axiom package (version 20100701-1.1). The vulnerability arises from axiom-test.sh using tempfile to create a temporary file, but then appending a suffix to the original filename and writing to that new filename. This behavior permits local users to overwrite arbitrary fi...

3.3CVSS6.5AI score0.00313EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
added 2014/01/28 12:0 a.m.33 views

CVE-2014-1640

axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...

3.3CVSS6.3AI score0.00313EPSS
SaveExploits0
NVD
NVD
added 2012/11/10 12:55 a.m.26 views

CVE-2012-2455

Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors...

6.4CVSS6.9AI score0.01411EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2012/11/10 12:0 a.m.36 views

CVE-2012-2455

Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors...

6.9AI score0.01411EPSS
SaveExploits0References3
CVE
CVE
added 2012/11/10 12:0 a.m.52 views

CVE-2012-2455

The CVE concerns Advanced Productivity Software DTE Axiom before 12.3.3, where registration ID validation is missing, allowing remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors. Root cause is lack of registration ID vali...

6.4CVSS7.1AI score0.01411EPSS
SaveExploits0References3Affected Software1
seebug.org
seebug.org
added 2007/01/14 12:0 a.m.20 views

Axiom Photo Gallery Template.PHP远程文件包含漏洞

Axiom Photo Gallery是一款基于PHP的WEB应用程序。 Axiom Photo Gallery不正确过滤用户提交的输入,远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Template.PHP'脚本对用户提交的'sphppath'参数缺少过滤,指定远程服务器上的文件作为包含参数,可导致以WEB权限执行任意命令。 Axiom Axiom Photo Gallery 8.6 目前没有解决方案提供: http://superb-west.dl.sourceforge.net/sourceforge/axiompng/...

7.1AI score
SaveExploits0
Prion
Prion
added 2007/01/11 11:28 a.m.11 views

Remote file inclusion

PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery axiompng 0.8.6 allows remote attackers to execute arbitrary PHP code via a URL in the baseAxiomPath parameter...

7.5CVSS8AI score0.03307EPSS
SaveExploits2References7Affected Software1
NVD
NVD
added 2007/01/11 11:28 a.m.14 views

CVE-2007-0200

PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery axiompng 0.8.6 allows remote attackers to execute arbitrary PHP code via a URL in the baseAxiomPath parameter...

7.5CVSS7.5AI score0.03307EPSS
SaveExploits2References7
Cvelist
Cvelist
added 2007/01/11 11:0 a.m.23 views

CVE-2007-0200

PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery axiompng 0.8.6 allows remote attackers to execute arbitrary PHP code via a URL in the baseAxiomPath parameter...

7.5AI score0.03307EPSS
SaveExploits2References7
CVE
CVE
added 2007/01/11 11:0 a.m.46 views

CVE-2007-0200

CVE-2007-0200 affects Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6. The issue is a PHP remote file inclusion in template.php exploited via the baseAxiomPath parameter, enabling remote attackers to execute arbitrary PHP code. This is the described vulnerability and its impact; no re...

7.5CVSS7.5AI score0.03307EPSS
SaveExploits2References7Affected Software1
zdt
zdt
added 2007/01/09 12:0 a.m.29 views

Axiom Photo/News Gallery 0.8.6 Remote File Include Exploit

Exploit for unknown platform in category web applications ========================================================== Axiom Photo/News Gallery 0.8.6 Remote File Include Exploit ========================================================== !/usr/bin/perl Axiom 0.8.6 photo gallery template.phpRemote Fi...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/01/09 12:0 a.m.20 views

Axiom Photo/News Gallery 0.8.6 Remote File Include Exploit

No description provided by source. !/usr/bin/perl Axiom 0.8.6 photo gallery template.phpRemote File Include Vulnerability Bug Found : DeltahackingTEAM discovery:Dr.Pantagon & Exploitet By Dr.Trojan Class: Remote File Include Vulnerability exemplary Exp:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/01/09 12:0 a.m.38 views

Axiom Photo/News Gallery 0.8.6 - Remote File Inclusion

!/usr/bin/perl Axiom 0.8.6 photo gallery template.phpRemote File Include Vulnerability Bug Found : DeltahackingTEAM discovery:Dr.Pantagon & Exploitet By Dr.Trojan Class: Remote File Include Vulnerability exemplary Exp: http://www.site.com/template.php?baseAxiomPath= Remote: Yes Type: Highly criti...

7.5CVSS5.8AI score0.03307EPSS
SaveExploits2
Rows per page
Query Builder