[SA19453] v-creator VCEngine.php Shell Command Injection Vulnerability

TITLE: v-creator VCEngine.php Shell Command Injection Vulnerability SECUNIA ADVISORY ID: SA19453 VERIFY ADVISORY: http://secunia.com/advisories/19453/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: v-creator 1.x http://secunia.com/product/9080/ DESCRIPTION: A...

CVE-2005-1755

PHP remote file inclusion vulnerability in pollvote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativerpfad parameter...

CVE-2005-3917

SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2005-3917

The CVE-2005-3917 entry affects CommodityRentals 2.0 Online Rental Business Creator script. It is a SQL injection vulnerability in the usersession function exploitable via the user_id parameter, enabling remote execution of arbitrary SQL commands. Impact per CVSS: Confidentiality/Integrity/Availa...

phpPoll.txt

svadvisory6 -------------------------------------------------------------+ Title: PHP Injection in PHP Poll Creator | Software: PHP Poll Creator v 1.01 | Homepage: http://www.phppc.de +------------+ Finder: rash | 24.05.05 | -------------------------------------------------------------+ Descripti...

PHP Injection in PHP Poll Creator

svadvisory6 -------------------------------------------------------------+ Title: PHP Injection in PHP Poll Creator | Software: PHP Poll Creator v 1.01 | Homepage: http://www.phppc.de +------------+ Finder: rash | 24.05.05 | -------------------------------------------------------------+ Descripti...

PHP Poll Creator 1.0.1 - 'Poll_Vote.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/13760/info PHP Poll Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer...

PHP Poll Creator 1.0.1 - Poll_Vote.php Remote File Inclusion

PHP Poll Creator 1.0.1 - PollVote.php Remote File Inclusion source: https://www.securityfocus.com/bid/13760/info PHP Poll Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...

CVE-2002-1427

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...

CVE-2002-1427

The CVE-2002-1427 entry affects Easy Homepage Creator 1.0. The print_html_to_file function in edit.cgi does not validate user credentials, enabling remote attackers to modify other users’ home pages. CVSS v2 data reports a base score of 7.5 ( HIGH ) with network attack vector, no authentication, ...

CVE-2002-1427

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...

CVE-2002-2217

Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal WSC-WebPortal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 l parameter to customize.php or the 2 pg parameter to index.php...

PT-2002-2929 · Wsc · Web Server Creator - Web Portal

Name of the Vulnerable Software and Affected Versions: Web Server Creator - Web Portal WSC-WebPortal version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by providing a URL in the l parameter to customize.php or the pg parameter to...

Web Server Creator Web Portal 0.1 - Remote File Inclusion

source: https://www.securityfocus.com/bid/6251/info The Web Server Creator Web Portal is prone to an issue which may allow attackers to include arbitrary files from a remote server. It is possible for remote attackers to influence the include path for the customize.php and index.php scripts. As a...

Easy Homepage Creator Vulnerability

AresU Advisory 18/July/2002 Easy Homepage Creator Vulnerability Severity : High Possible to edit member homepage Systems Affected: Advanced Easy Homepage Creator v1.0 Easy Homepage Creator v1.0 Vendor URL: http://www.easyscripts.co.uk Vuln Type : It does not use Access Validation to edit homepage...

Ben Chivers Easy Homepage Creator 1.0 - File Modification

source: https://www.securityfocus.com/bid/5340/info The vulnerability has been reported for Easy Homepage Creator. It is possible for an atttacker to modify any user's home page. The vulnerability is the result of Homepage Creator failing to properly authenticate users who wish to edit home pages...

Ben Chivers Easy Homepage Creator 1.0 - File Modification

Ben Chivers Easy Homepage Creator 1.0 - File Modification source: https://www.securityfocus.com/bid/5340/info The vulnerability has been reported for Easy Homepage Creator. It is possible for an atttacker to modify any user's home page. The vulnerability is the result of Homepage Creator failing ...

Security Hole in WWWeBBB forum

All versions. Last one is 3.82beta. http://www.host.com/wwwebbbforumdirectory/page.cgi?../../file/to/view WWWeBBB creator has been alerted. More details in french : http://www.bal-team.t2u.com/Tuts/WWWeBBB.txt frog-m@n Discutez en ligne avec vos amis, essayez MSN Messenger : http://messenger.msn....

Solaris 2.5.1 - ffbconfig Local Privilege Escalation

Solaris 2.5.1 - ffbconfig Local Privilege Escalation / source: https://www.securityfocus.com/bid/202/info The ffbconfig program is used to configure the Creator Fast Frame Buffer FFB Graphics Accelerator, which is a component of the FFB Configuration Software Package SUNWffbcf. A buffer overflow...