aliboard Beta Upload Shell From ControlPanel

Name : aliboard Beta Upload Shell From ControlPanel Download From : http://www.alilg.com/software/free-opensource-bulletin-board/ Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM Home Page : WwW.4RxH.CoM Google Dork : Powered by aliboard © 2006, 2007 alilg web-based software...

aliboard-upload.txt

Name : aliboard Beta Upload Shell From ControlPanel Download From : http://www.alilg.com/software/free-opensource-bulletin-board/ Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM Home Page : WwW.4RxH.CoM Google Dork : Powered by aliboard © 2006, 2007 alilg web-based software...

CVE-2007-6178

Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...

CVE-2007-6178

CVE-2007-6178 is a known remote file inclusion in Easy Hosting Control Panel (EHCP) for Ubuntu up to version 0.22.8 and earlier. The vulnerability allows an attacker to supply a URL in the confdir parameter to config/dbutil.bck.php and config/dbutil.php, potentially enabling arbitrary PHP code ex...

CVE-2007-6178

Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...

CVE-2007-5321

Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...

Directory traversal

Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...

CVE-2007-5321

Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...

CVE-2007-5321

CVE-2007-5321 affects Verlihub Control Panel (VHCP) versions 1.7 and earlier, where index.php is vulnerable to a directory traversal via the page parameter (..), allowing remote inclusion of arbitrary files. Root cause is improper sanitization of the page parameter, enabling directory traversal. ...

Verlihub Control Panel 1.7.x - Local File Inclusion

Verlihub Control Panel 1.7.x - Local File Inclusion Verlihub Control Panel v 1.7 PHP 4.x Local File Inclusion http://vhcp.verlihub- project.org/ Bug Found By Methodman From TEAMELITE dchub.nemesis.te-home.net:4120 Bug: Line: 27 - iniset"magicquotesgpc","1"; ............................ Line: 71 -...

Verlihub Control Panel 1.7.x - Local File Inclusion

Verlihub Control Panel v 1.7 PHP 4.x Local File Inclusion http://vhcp.verlihub- project.org/ Bug Found By Methodman From TEAMELITE dchub.nemesis.te-home.net:4120 Bug: Line: 27 - iniset"magicquotesgpc","1"; ............................ Line: 71 - $pagename = isset$GET'page' ? $GET'page' :...

Verlihub Control Panel <= 1.7.x Local File Inclusion Vulnerability

No description provided by source. Verlihub Control Panel v 1.7 PHP 4.x Local File Inclusion http://vhcp.verlihub- project.org/ Bug Found By Methodman From TEAMELITE - dchub.nemesis.te-home.net:4120 Bug: Line: 27 - iniset"magicquotesgpc","1"; ............................ Line: 71 - $pagename =...

Verlihub Control Panel <= 1.7.x Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Verlihub Control Panel dchub.nemesis.te-home.net:4120 Bug: Line: 27 - iniset"magicquotesgpc","1"; ............................ Line: 71 - $pagename = isset$GET'page' ?...

hackersafe-plesk.txt

HackerSafe Labs - Security Advisory http://www.hackersafelabs.com SWsoft Plesk for Windows - SQL Injection Vulnerability Date: 9-11-07 Vendor: www.swsoft.com Package: Plesk for Windows Versions: v7.6.1, v8.1.0, v8.1.1, v8.2.0 Vendor Demo: https://plesk8.1win.demo.swsoft.com:8443/login.php3 Credit...

Directory traversal

Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a "/...../" sequence...

CVE-2007-4723

Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to bypass authentication via directory traversal sequences in a URI that ends with the name of a publicly available page, as demonstrated by a "/...../" sequence...

CVE-2005-4861

Ragnarok Online Control Panel (ROCP) 4.3.4a is affected by CVE-2005-4861. The vulnerability arises in functions.php where CHECK_AUTH mishandles a trailing "/login.php" in PHP_SELF, allowing remote attackers to bypass authentication when accessing account_manage.php. Reported impact is authenticat...

CVE-2007-4723

CVE-2007-4723 affects Ragnarok Online Control Panel 4.3.4a when used with the Apache HTTP Server. The vulnerability is a directory traversal that allows remote attackers to bypass authentication via crafted URIs ending with publicly accessible pages, demonstrated by a "/...../" sequence and an ac...

CVE-2005-4861

functions.php in Ragnarok Online Control Panel ROCP 4.3.4a allows remote attackers to bypass authentication by requesting accountmanage.php with a trailing "/login.php" PHPSELF value, which is not properly handled by the CHECKAUTH function...