css-read.txt

?php / BEGIN LICENSE BLOCK CSSH - a proof of concept CSS based history crawler Copyright C 2008 Sirdarckcat This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of t...

Remote file inclusion

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

PHP Crawler 'footer.php'远程文件包含漏洞

BUGTRAQ ID: 31217 CNCAN ID：CNCAN-2008091803 PHP Crawler是一款基于PHP的WEB应用程序。 PHP Crawler不正确处理用户提交的输入，远程攻击者可以利用漏洞以WEB进程权限执行任意PHP代码。 问题是'footer.php'脚本对用户提交的'footerfile'参数缺少过滤，提交远程服务器上的任意文件作为包含文件，可导致以WEB进程权限执行任意PHP代码。 PHP-Crawler 0.8 目前没有解决方案提供： http://php-crawler.sourceforge.net/...

CVE-2008-4137

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

CVE-2008-4137

CVE-2008-4137 affects PHP-Crawler 0.8; vulnerability is a PHP remote file inclusion via the footer_file parameter, allowing remote code execution. CVSS v2 base score 7.5 (HIGH). Public exploits/advisories exist (e.g., Exploit-DB, SecurityFocus) per references. No remediation details provided in t...

CVE-2008-4137: Improper Input Validation

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

phpcrawler-rfi.txt

Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researchers www.domlabs.org...

PHP Crawler 0.8 (footer) Remote File Inclusion Vulnerability

No description provided by source. Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs -...

PHP Crawler 0.8 - Remote File Inclusion

PHP Crawler 0.8 - Remote File Inclusion Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs...

PHP Crawler 0.8 (footer) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ PHP Crawler 0.8 footer Remote File Inclusion Vulnerability ============================================================ Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability...

PHP Crawler 0.8 - Remote File Inclusion

Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researchers www.domlabs.org...

runcms-overwrite.txt

RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...

RunCMS 1.6 - disclaimer.php Remote File Overwrite

RunCMS 1.6 - disclaimer.php Remote File Overwrite RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px;...

RunCMS <= 1.6 disclaimer.php Remote File Overwrite Exploit

Exploit for unknown platform in category web applications ========================================================== RunCMS RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px;...

RunCMS 1.6 - 'disclaimer.php' Remote File Overwrite

RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...

Classic: Web2. 0 client components vulnerability scanning one-vulnerability warning-the black bar safety net

A, Web2. 0 is the several technology of integrated application of the results, these techniques are: AJAX（Asynchronous JavaScript and XML,Flash, JSONJavaScript Object Notation,SOAP Simple Object Access Protocol and REST, Representational State Transfer, etc. These techniques coupled with...

Fixed XSS vulnerability at www.cambodiacrawler.com

Security researcher Uber0n, has submitted on 05/12/2007 a cross-site-scripting XSS vulnerability affecting www.cambodiacrawler.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is...

Fixed XSS vulnerability at www.tahiticrawler.com

Security researcher Uber0n, has submitted on 05/12/2007 a cross-site-scripting XSS vulnerability affecting www.tahiticrawler.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It is current...

Fixed XSS vulnerability at www.falklandislandscrawler.com

Security researcher Uber0n, has submitted on 05/12/2007 a cross-site-scripting XSS vulnerability affecting www.falklandislandscrawler.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007. It i...

Fixed XSS vulnerability at www.frenchpolynesiacrawler.com

Security researcher Uber0n, has submitted on 05/12/2007 a cross-site-scripting XSS vulnerability affecting www.frenchpolynesiacrawler.com, which at the time of submission ranked 6119889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/12/2007...