PHP PHP-Charts Remote Code Execution

The vulnerability is due to lack of input sanitization in the affected function. A remote attacker can exploit this issue by sending a specially crafted script to the target server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary PHP code...

php-Charts 1.0 RCE

Remote command execution in php-Charts type parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

PHP-Charts 1.0 - Code Execution

Exploit Title: PHP-CHARTS v1.0 code execution vulnerability Date: 05/15/2013 Exploit Author: fizzle stick Vendor Homepage: http://php-charts.com/ Software Link: http://php-charts.com/downloads/php-chartv1.0.zip Version: v1.0 Tested on: Windows Summary: PHP-charts v1.0 suffers from a code executio...

PHP-Charts 1.0 - Code Execution

PHP-Charts 1.0 - Code Execution Exploit Title: PHP-CHARTS v1.0 code execution vulnerability Date: 05/15/2013 Exploit Author: fizzle stick Vendor Homepage: http://php-charts.com/ Software Link: http://php-charts.com/downloads/php-chartv1.0.zip Version: v1.0 Tested on: Windows Summary: PHP-charts...

SuSE Update for calligra openSUSE-SU-2012:1061-1 (calligra)

Check for the Version of calligra OpenVAS Vulnerability Test $Id: gbsuse201210611.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for calligra openSUSE-SU-2012:1061-1 calligra Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This...

php-Charts url.php Remote PHP Code Execution

The php-Charts install hosted on the remote web server contains a flaw that could allow arbitrary PHP code execution. Input passed to the 'wizard/url.php' script is not properly sanitized before being used in a PHP eval call. An unauthenticated, remote attacker could leverage this vulnerability t...

php-Charts 'url.php'任意PHP代码执行漏洞

BUGTRAQ ID: 57448 php-Charts是PHP图表和绘图组件，为Web应用呈现动态的、数据驱动的、HTML5图表。 php-Charts 1.0及其他版本没有正确验证 wizard/url.php 内的GET参数值，即用在 "eval" 调用内，可被利用执行任意PHP代码。 0 php-Charts 1.x 厂商补丁： php-Charts ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://phpchart.net/...

PHP-Charts 1.0 - PHP Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "PHP-Charts v1.0 P...

php-Charts <= 1.0 RCE Vulnerability - Active Check

php-Charts is prone to an arbitrary PHP code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

PHP-Charts v1.0 PHP Code Execution Vulnerability

This module exploits a PHP code execution vulnerability in php-Charts version 1.0 which could be abused to allow users to execute arbitrary PHP code under the context of the webserver user. The 'url.php' script calls eval with user controlled data from any HTTP GET parameter name. This module...

PHP-Charts 1.0 PHP Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "PHP-Charts v1.0 P...

php-Charts 1.0 Arbitrary PHP Code Execution Vulnerability

This Metasploit module exploits a PHP code execution vulnerability in php-Charts version 1.0 which could be abused to allow users to execute arbitrary PHP code under the context of the webserver user. The 'url.php' script calls eval with user controlled data from any HTTP GET parameter name. This...

The use of local include vulnerability to execute arbitrary code-a vulnerability warning-the black bar safety net

Impact of program: php-chartv1. 0 Program official: http://php-charts.com/ Defect type: PHP Code Execution. =============================================================== Test platform system: Debian squeeze 6.0.6 Server software version: Apache/2.2.16 Debian PHP 5.3.3-7+squeeze14 with...

php-Charts Arbitrary PHP Code Execution Vulnerability

Exploit for php platform in category web applications =============================================================== Vulnerable Software: php-chartv1.0 Official Site: http://php-charts.com/ Vuln: PHP Code Execution. =============================================================== Tested On: Debia...

PHP-Charts - Arbitrary PHP Code Execution

PHP-Charts - Arbitrary PHP Code Execution =============================================================== Vulnerable Software: php-chartv1.0 Official Site: http://php-charts.com/ Vuln: PHP Code Execution. =============================================================== Tested On: Debian squeeze...

PHP Charts 1.0 Code Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

UBUNTU-CVE-2012-5881

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...

dotProject <= 2.1.6 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Discovered by dun \ posdubatgmail.com 2012-11-13 dotProject = 2.1.6 Remote File Inclusion Vulnerability Script: "PHP web-based project management framework that includes modules for companies, projects, tasks with Gantt charts, forums, files,...

calligra: security and bugfix update. (important)

Fix buffer overflow in MS Word ODF filter among other non-security related bugs. Also a version update to 2.4.3 happened: Words: - Always show vertical scroll bar to avoid race condition kde301076 - Do not save with an attribue that makes LibreOffice and OpenOffice crash kde298689 Kexi: - Fixed...

Performance Charts for vSphere Environment Display "No data available"

Challenge Veeam ONE Client shows the "No data available" message on performance charts for different metrics: Cause Here are the most common reasons for missing data on the performance charts: The Veeam ONE service account does not have Write access to the "PerfСache" folder. The account used by...