2705 matches found
Back-End CMS 0.4.5 - Facts.php?includes_path Remote File Inclusion
Back-End CMS 0.4.5 - Facts.php?includespath Remote File Inclusion source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an...
Back-End CMS 0.4.5 - 'search.php?includes_path' Remote File Inclusion
source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...
phpQuiz 0.1.2 - SQL Injection / Code Execution
Title: PHPQuiz Download File phpquiz/imgquiz/ folder is by defaut writable so after uploading a simple phpshell we can lanche cmd from : http://localhost/phpquiz/...
Simple manual to create the ultimate Trojan horse—talk for some back door of the simple modifications-vulnerability warning-the black bar safety net
First talk about the Radmin That Radmin was a good thing, I also recently discovered this stuff benefits, such as not to be killed, management is very convenient, speed is also very fast, simple configuration...... Anyway, I see a lot of the Administrator's selection of this. Although is a good...
MyBace Light (hauptverzeichniss) Remote File Inclusion
+-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...
Start the back door of one idea-the vulnerability of early warning-the black bar safety net
A Group Policy startup script; Use process:start the Group Policyrun-gpedit. msc-Computer Configuration-Windows Settings-scriptsstartup/shutdown Start with the shutdown related settings; Select Start-properties-add will pop up select the script name Selection procedure C:\windows\system32\net.exe...
solaris/sparc connect-back (with XNOR encoded session) 600 bytes
Exploit for solaris/sparc platform in category shellcode ================================================================ solaris/sparc connect-back with XNOR encoded session 600 bytes ================================================================ / black-RXenc-con-back-SOLARIS.c MIPS This is a...
solaris/sparc connect-back with XNOR encoded session 600 bytes
solaris/sparc connect-back with XNOR encoded session 600 bytes. Shellcode exploit for solarissparc platform / black-RXenc-con-back-SOLARIS.c MIPS This is a relitivly small 600 byte shellcode that encodes all network trafic between the exploited process and the attacker. All clear-text shell i/o i...
I'm on the web the back door of some of the views-bug warning-the black bar safety net
Since the lake2 out of the back door sweep horse program later, Backdoor survival rate could be greatly reduced, alas, no way, who told people so badly?, a program to get so many ponies, the poor newbies, I leave the back door all of a sudden the whole is exposed. This sweep of the mA program is...
Back-end0721.txt
/ Federico Fazzi, / Back-end = 0.7.2.1 jpcache.php Remote command execution / 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and cracker can execute a remote command...
Back-end = 0.7.2.1 (jpcache.php) Remote command execution
/ Federico Fazzi, [email protected] / Back-end = 0.7.2.1 jpcache.php Remote command execution / 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and cracker can execute a remote...
Back-End CMS 0.7.2.1 - jpcache.php Remote File Inclusion
Back-End CMS 0.7.2.1 - jpcache.php Remote File Inclusion Federico Fazzi, Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and...
Back-End CMS <= 0.7.2.1 (jpcache.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== Back-End CMS Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of...
Back-End CMS 0.7.2.1 - 'jpcache.php' Remote File Inclusion
Federico Fazzi, Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and cracker can execute a remote command...
Back-End CMS <= 0.7.2.1 (jpcache.php) Remote Include Vulnerability
No description provided by source. Federico Fazzi, [email protected] Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and...
ishopcart-cgi-bof.c.txt
Vendor: ishopcart inc Vendor Site: ishopcart.com Vendor Status: notified via telephone While spending a night auditing I have found 2 buffer overflows and 1 directory traversal in the ishopcart cgi, which is written in C. The directory traversal is caused by how the cgi chooses to show pages. If,...
Remote file inclusion
PHP remote file inclusion vulnerability in BEconfig.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSLclassdir parameter...
CVE-2006-2682
PHP remote file inclusion vulnerability in BEconfig.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSLclassdir parameter...
CVE-2006-2682
CVE-2006-2682 concerns a PHP remote file inclusion in Back-End CMS. The affected product is Back-End CMS 0.7.2.1 and earlier, where the vulnerability exists in BE_config.php. An attacker can supply a URL in the _PSL[classdir] parameter, enabling the execution of arbitrary PHP code on the server. ...
