openSUSE Security Update : castor (openSUSE-SU-2014:0822-1)

castor was updated to prevent XXE attacks via crafted XML documents CVE-2014-3004. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-435. The text description of this plugin is C...

CVE-2014-3004

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XML document...

Xxe

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XML document...

UBUNTU-CVE-2014-3004

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XML document...

CVE-2014-3004

CVE-2014-3004 affects the Castor Library: the default configuration of the Xerces SAX Parser in Castor prior to version 1.3.3 allows XML External Entity (XXE) processing via crafted XML, enabling context-dependent attackers to disclose sensitive information. The issue is mitigated by upgrading Ca...

CVE-2014-3004

The default configuration for the Xerces SAX Parser in Castor before 1.3.3 allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted XML document...

Castor Library XXE Disclosure

Castor Library Default Configuration could lead to XML External Entity XXE Attack Vulnerability Type: Local or Remote File Disclosure Reporter: Ron Gutierrez [email protected] and Adam Bixby [email protected] Company: Gotham Digital Science [email protected] Affected Software:...

Castor Library CVE-2014-3004 XML External Entity Information Disclosure Vulnerability

...

Castor Library - XML External Entity Information Disclosure

Castor Library - XML External Entity Information Disclosure source: https://www.securityfocus.com/bid/67676/info Castor Library is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Caster...

Castor Library - XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/67676/info Castor Library is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Caster Library 1.3.3-RC1 and earlier are vulnerable...

CVE-2006-5481

Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in 1 lib/code.php, 2 lib/dbconnect.php, 3 lib/error.php, 4 lib/menu.php, and other unspecified files. NOTE: the provenance of...

CVE-2006-5481

Affected software: 2le.net Castor PHP Web Builder 1.1.1. Vulnerability: Multiple PHP remote file inclusion via the rootpath parameter in several files (lib/code.php, lib/dbconnect.php, lib/error.php, lib/menu.php) and other unspecified files. Impact (as stated): Remote attackers could execute arb...

CVE-2006-5480

CVE-2006-5480 affects the 2le.net Castor PHP Web Builder 1.1.1. The vulnerability is a PHP remote file inclusion in lib/rs.php that allows a remote attacker to execute arbitrary PHP code by supplying a crafted rootpath parameter. This is a server-side class of flaw that enables code execution thr...

CVE-2006-5481

Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in 1 lib/code.php, 2 lib/dbconnect.php, 3 lib/error.php, 4 lib/menu.php, and other unspecified files. NOTE: the provenance of...

RSSonate remote Command Execution Vulnerabilities

!/usr/bin/perl CASTOR = 1.1.1 Remote Command Execution Vulnerability Risk : High Remote Code Execution Url: svn.gna.org/svn/castor/trunk Exploit: http://www.site.com/path/lib/rs.php?rootpath=EvilScript coded and f0und3d by Kw3RLn ciriboflacsATYaHOo.com Romanian Security Team .: hTTp://RST-CREW.NE...

CASTOR <= 1.1.1 Remote Command Execution Vulnerability

!/usr/bin/perl CASTOR = 1.1.1 Remote Command Execution Vulnerability Risk : High Remote Code Execution Url: svn.gna.org/svn/castor/trunk Exploit: http://www.site.com/path/lib/rs.php?rootpath=EvilScript coded and f0und3d by Kw3RLn ciriboflacsATYaHOo.com Romanian Security Team .: hTTp://RST-CREW.NE...

CASTOR 1.1.1 - librs.php Remote File Inclusion

CASTOR 1.1.1 - librs.php Remote File Inclusion !/usr/bin/perl CASTOR Romanian Security Team .: hTTp://RST-CREW.NET :. Shoutz to Oo, str0ke, th0r and all members of RST ! use LWP::Simple; print "...........................RST...............................\n"; print ". .\n"; print ". CASTOR...

CASTOR <= 1.1.1 (lib/rs.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl CASTOR = 1.1.1 Remote Command Execution Vulnerability Risk : High Remote Code Execution Url: svn.gna.org/svn/castor/trunk Exploit: http://www.site.com/path/lib/rs.php?rootpath=EvilScript coded and f0und3d by Kw3RLn ciriboflacsATYaHOo.com Romanian...

CASTOR 1.1.1 - '/lib/rs.php' Remote File Inclusion

!/usr/bin/perl CASTOR Romanian Security Team .: hTTp://RST-CREW.NET :. Shoutz to Oo, str0ke, th0r and all members of RST ! use LWP::Simple; print "...........................RST...............................\n"; print ". .\n"; print ". CASTOR hTTp://RST-CREW.NET .\n"; print ". coded by Kw3rLN -...

CASTOR <= 1.1.1 (lib/rs.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ======================================================== CASTOR Romanian Security Team .: hTTp://RST-CREW.NET :. Shoutz to Oo, th0r and all members of RST ! use LWP::Simple; print...