2672 matches found
MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Descriptio...
Quick Classifieds 1.0 - 'controlpannel/color_help.php3?DOCUMENT_ROOT' Remote File Inclusion
source: https://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...
Horde Webmail file inclusion proof of concept & patch.
Horde 3.1.6 arbitrary file inclusion vulnerability, proof of concept & patch. A severe security vulnerability affects any unix distribution running version 3.1.6 of the Horde webmail client included in most popular webhosting control panels. All previous versions are also affected and it is...
Thecus N5200Pro NAS Server Control Panel RFI Vulnerability
No description provided by source. Thecus N5200Pro NAS Server Control Panel Remote File nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html ?php $htm=$REQUEST'name'; requireonce"/img/htdocs/webconfig"; requireonce"/img/www/inc/function.php"; getsysconf;...
thecus-rfi.txt
Thecus N5200Pro NAS Server Control Panel Remote File İnclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? İnfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke...
Thecus N5200Pro NAS Server Control Panel RFI Vulnerability
Exploit for hardware platform in category remote exploits ========================================================== Thecus N5200Pro NAS Server Control Panel RFI Vulnerability ========================================================== Thecus N5200Pro NAS Server Control Panel Remote File Include...
aliboard Beta Upload Shell From ControlPanel
Name : aliboard Beta Upload Shell From ControlPanel Download From : http://www.alilg.com/software/free-opensource-bulletin-board/ Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM Home Page : WwW.4RxH.CoM Google Dork : Powered by aliboard © 2006, 2007 alilg web-based software...
aliboard-upload.txt
Name : aliboard Beta Upload Shell From ControlPanel Download From : http://www.alilg.com/software/free-opensource-bulletin-board/ Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM Home Page : WwW.4RxH.CoM Google Dork : Powered by aliboard © 2006, 2007 alilg web-based software...
CVE-2007-6178
Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...
CVE-2007-6178
Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...
CVE-2007-6178
CVE-2007-6178 is a known remote file inclusion in Easy Hosting Control Panel (EHCP) for Ubuntu up to version 0.22.8 and earlier. The vulnerability allows an attacker to supply a URL in the confdir parameter to config/dbutil.bck.php and config/dbutil.php, potentially enabling arbitrary PHP code ex...
CVE-2007-6178: Improper Input Validation
Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...
Directory traversal
Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...
CVE-2007-5321
Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...
CVE-2007-5321
Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...
CVE-2007-5321
CVE-2007-5321 affects Verlihub Control Panel (VHCP) versions 1.7 and earlier, where index.php is vulnerable to a directory traversal via the page parameter (..), allowing remote inclusion of arbitrary files. Root cause is improper sanitization of the page parameter, enabling directory traversal. ...
CVE-2007-5321: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Verlihub Control Panel VHCP 1.7 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the page parameter...
Verlihub Control Panel <= 1.7.x Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== Verlihub Control Panel dchub.nemesis.te-home.net:4120 Bug: Line: 27 - iniset"magicquotesgpc","1"; ............................ Line: 71 - $pagename = isset$GET'page' ?...
Verlihub Control Panel <= 1.7.x Local File Inclusion Vulnerability
No description provided by source. Verlihub Control Panel v 1.7 PHP 4.x Local File Inclusion http://vhcp.verlihub- project.org/ Bug Found By Methodman From TEAMELITE - dchub.nemesis.te-home.net:4120 Bug: Line: 27 - iniset"magicquotesgpc","1"; ............................ Line: 71 - $pagename =...