1445 matches found
Code injection
Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php. NOTE: a separate vulnerability could be leveraged to make this...
Netsprint Toolbar 1.1 arbitrary remote code vulnerability
Synopsis: Netsprint Toolbar 1.1 arbitrary remote code vulnerability Product: Netsprint Toolbar Version: 1.1 Author: Michal Bucko sapheal Issue: ====== Function of a prototype isChecked char in toolbar.dll is vulnerable to buffer overrun. Arbitrary code execution might be possible.The problem occu...
Rookie magic bis in the PE file gap write code-vulnerability warning-the black bar safety net
It is also a series of second, the interval time is relatively long. 1. Don't know how many people remember or have seen rookie magic one,mentioned inside of SOFTICE and PE files phase Off of little knowledge,and the PE file structure,you continue to see this are helpful 2. If you're even a rooki...
PHP Msg_Receive()内存分配整数溢出漏洞
BUGTRAQ ID: 23236 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的msgreceive函数实现上存在整数溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 PHP的msgreceive函数没有对maxsize参数执行任何检查便直接在内存分配中使用，导致整数溢出。有漏洞的代码如下： PHPFUNCTIONmsgreceive ... if zendparseparametersZENDNUMARGS TSRMLSCC, "rlzlz|blz", &queue, &desiredmsgtype, &outmsgtype,...
Code injection
Static code injection vulnerability in admin/settings.php in Net Portal Dynamic System NPDS 5.10 and earlier allows remote authenticated users to inject arbitrary PHP code via the xtop parameter in a "ConfigSave" op to admin.php, which can later be accessed via a "Configure" op to admin.php...
phpbb2. 0. 1 2 full path disclosure vulnerability-a vulnerability warning-the black bar safety net
phpbb is a powerful, scalable open source electronic Bulletin system. The latest version and low version are there is a path disclosure issue. Test method: The forum path is/viewtopic. php? p=6&highlight=\xiaohua Will appear the following text: Warning: Compilation failed: missing terminating for...
wwwpaintboar(newsfile) Remote File Inclusion Vulnerability
wwwpaintboarnewsfile Remote File Inclusion Vulnerability ----------------------------------------------------------- Version : 1.0 Website URL: http://phpforge.oirac.com/ ----------------------------------------------------------- Discoved by sawxyz sasan XIII Security Researcher Gr33tZ t0 :Snake...
vBulletin <= 3.6.4 (inlinemod.php postids) Remote SQL Injection Exploit
No description provided by source. ?php printr' ----------------------------------------------------------------------------- vBulletin = 3.6.4 inlinemod.php "postids" sql injection / privilege escalation by session hijacking exploit by rgod mail: retrog at alice dot it site:...
Fedora Core 6 : kernel-2.6.19-1.2911.fc6 (2007-226)
CVE-2006-0007: The key serial number collision avoidance code in the keyallocserial function in Linux kernel 2.6.9 up to 2.6.20 allows remote attackers to cause a denial of service crash via vectors that trigger a null dereference, as originally reported as 'spinlock CPU recursion.' Update to lin...
Phpbb Tweaked (phpbb_root_path) Remote File Include Exploit
----------------------------------------------- Phpbb Tweaked phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: includeonce $phpbbrootpath...
PGP Desktop service fails to validate user supplied data
Overview PGP Desktop fails to properly validate objects passed into the PGP Desktop service. This vulnerability may allow a remote, authenticated attacker to execute arbitrary code. Description PGP Desktop versions prior to 9.5.1 fail to properly validate objects passed into the PGP Desktop servi...
CVE-2007-0127
The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatrix request, which allows remote attackers to execute arbitrary code via JavaScript code that uses an invalid object in this request that causes a controlled pointer to be...
Aratix <= 0.2.2b11 (inc/init.inc.php) Remote File Include Vulnerability
+------------------------------------------------------------------------------------------- + Aratix = 0.2.2b11 inc/init.inc.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............:...
phpProfiles <= 3.1.2b Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== phpProfiles + include/account.inc.php, lines 09: include"$incpath/footer.inc.php"; + include/index.inc.php, lines 05: include"$incpath/adminerr.inc.php"; + ... see below fo...
PHP-Update 2.7 - extract() Authentication Bypass Shell Injection
PHP-Update 2.7 - extract Authentication Bypass Shell Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont+...
PLS-Bannieres 1.21 (bannieres.php) File Include
PLS-Bannieres 1.21 bannieres.php File Include Source Code: ftp://ftp1.comscripts.com/PHP/1959ban01-01.zip Vulnerable Code: modules/bannieres/bannieres.php In Line 13 : include "$chemin/includes/connexion.php" ; Exploit :...
Comdev Photo Gallery 3.1 :) <= Remote File Inclusion
+-------------------------------------------------------------------- + + Comdev Photo Gallery 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Photo Gallery 3.1 + Venedor ...........: http://www.comdevweb.com +...
Comdev Events Calendar 3.1 :) <= Remote File Inclusion
+-------------------------------------------------------------------- + + Comdev Events Calendar 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Events Calendar 3.1 + Venedor ...........: http://www.comdevweb.co...
net2ftp: a web based FTP client :) <= Remote File Inclusion
+-------------------------------------------------------------------- + + net2ftp: a web based FTP client : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: net2ftp: a web based FTP client + Venedor ...........:...
CVE-2006-4433
PHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier PHPSESSID for third party session handlers, which might make it easier for remote attackers to exploit other vulnerabilities by inserting PHP code into the PHPSESSID, which is stored in the session...