4088 matches found
[Full-disclosure] phpFormGenerator
EXPL-A-2006-004 exploitlabs.com Advisory 049 - - phpFormGenerator - AFFECTED PRODUCTS ================= phpFormGenerator v2.09 http://phpformgen.sourceforge.net/ OVERVIEW ======== phpFormGenerator is an easy-to-use tool to create reliable and efficient web forms in a snap. No programming of any...
Exploit Labs Security Advisory 2006.4
EXPL-A-2006-004 exploitlabs.com Advisory 049 - - phpFormGenerator - AFFECTED PRODUCTS ================= phpFormGenerator v2.09 http://phpformgen.sourceforge.net/ OVERVIEW ======== phpFormGenerator is an easy-to-use tool to create reliable and efficient web forms in a snap. No programming of any...
cpanel10.txt
A new vulnerability was found in Cpanel V.10; It happen cause the variable &File of the select.html file in the edit-zone just filter the 's labels and the possibility can by open to other labels like Server Side Include, HMTL labels... including Javascript expressed in other ways An attacker can...
cPanel 10.8.1/10.8.2 - OnMouseover Cross-Site Scripting
source: https://www.securityfocus.com/bid/18671/info cPanel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context o...
XSS in Cpanel 10
A new vulnerability was found in Cpanel V.10; It happen cause the variable &File of the select.html file in the edit-zone just filter the script's labels and the possibility can by open to other labels like Server Side Include, HMTL labels... including Javascript expressed in other ways An attack...
cPanel 10.8.110.8.2 - OnMouseover Cross-Site Scripting
cPanel 10.8.110.8.2 - OnMouseover Cross-Site Scripting source: https://www.securityfocus.com/bid/18671/info cPanel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute ...
cPanel 10 - Select.HTML Cross-Site Scripting
source: https://www.securityfocus.com/bid/18655/info Cpanel is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
cPanel 10 - Select.HTML Cross-Site Scripting
cPanel 10 - Select.HTML Cross-Site Scripting source: https://www.securityfocus.com/bid/18655/info Cpanel is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
CVE-2006-2825
cPanel does not automatically synchronize the PHP openbasedir configuration directive between the main server and virtual hosts that share physical directories, which might allow a local user to bypass openbasedir restrictions and access other virtual hosts via a PHP script that uses a main serve...
CVE-2006-2825
cPanel does not automatically synchronize the PHP openbasedir configuration directive between the main server and virtual hosts that share physical directories, which might allow a local user to bypass openbasedir restrictions and access other virtual hosts via a PHP script that uses a main serve...
Design/Logic Flaw
cPanel does not automatically synchronize the PHP openbasedir configuration directive between the main server and virtual hosts that share physical directories, which might allow a local user to bypass openbasedir restrictions and access other virtual hosts via a PHP script that uses a main serve...
CVE-2006-2825
cPanel does not automatically synchronize the PHP openbasedir configuration directive between the main server and virtual hosts that share physical directories, which might allow a local user to bypass openbasedir restrictions and access other virtual hosts via a PHP script that uses a main serve...
CVE-2006-2825
CVE-2006-2825 : cPanel does not automatically synchronize the PHP open_basedir configuration between the main server and virtual hosts that share physical directories. This may allow a local user to bypass open_basedir restrictions and access other virtual hosts via a PHP script that uses a main-...
cPanel OpenBaseDir Bypass
Hey when you try to run a phpshell and open BaseDir is on you will se that: Open base dir: /home//:/usr/lib/php:/usr/local/lib/php:/tmp Okey.. now run the phpshell with user like that: http://server..com//phpshell.php you will see that: Open base dir: OFF not secure...
CVE-2006-1119
fantastico in Cpanel does not properly handle when it has insufficient permissions to perform certain file operations, which allows remote authenticated users to obtain the full pathname, which is leaked in a PHP error message...
CVE-2006-1119
fantastico in Cpanel does not properly handle when it has insufficient permissions to perform certain file operations, which allows remote authenticated users to obtain the full pathname, which is leaked in a PHP error message...
CVE-2006-1119
CVE-2006-1119 concerns the Fantastico component integrated with cPanel . The issue arises when Fantastico does not properly handle operations with insufficient permissions, allowing remote authenticated users to cause a PHP error message that leaks the full pathname. The vulnerability is characte...
CVE-2006-1119
fantastico in Cpanel does not properly handle when it has insufficient permissions to perform certain file operations, which allows remote authenticated users to obtain the full pathname, which is leaked in a PHP error message...
Cpanel Path Disclosure Vulnerability
Cpanel hsa the vulnerability to discover the path of the files exp: loginto your cpanel account goto fantastico try to install one of the scripts ! exp: 4images if the server set a permission on the /tmp , cpanel tmp files yuo should see this Warning: main/home/userid/publichtml/fantversion.php:...