Butterfly ORGanizer 2.0.0 - Arbitrary Delete (Category/Account)

!/usr/bin/perl -w Butterfly Organizer 2.0.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/category-delete.php?tablehere=".$cat."&isjsconfirmed=1"; $res = $b-requestHTTP::Request-newGET=$host; $answ...

Butterfly ORGanizer 2.0.0 - SQL Injection / Cross-Site Scripting

====================================================================== Butterfly Organizer 2.0.0 SQL/XSS Multiple Remote Vulnerabilities ====================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

CVE-2007-4485

PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter. NOTE: it...

CVE-2007-4485

CVE-2007-4485 affects Butterfly online visitors counter 1.08. The vulnerability arises in visitor.php where, when used with certain older PHP versions and improper handling of the SERVER superglobal, an attacker can cause a remote PHP code execution by supplying a URL in _SERVER[DOCUMENT_ROOT]. T...

CVE-2007-4485: Undefined Security Weakness

PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter. NOTE: it...

Butterfly online vistors counter 1.08 RFI

App Name : Butterfly online vistors counter v.1.08 HomePage : http://www.phoenix.frihost.net/butterfly/readme.php Vuln type : Remote File Include RFI Vulnerability Discovered by : iNs Vuln Code: visitor.php includeonce $SERVER"DOCUMENTROOT" . "/butterfly/custom.php"; // include settings POC:...