PT-2009-5845 · Php · Php

Name of the Vulnerable Software and Affected Versions: PHP versions 5.3.x before 5.3.1 Description: The issue in PHP does not recognize the safe mode include dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform...

CVE-2009-3970

SQL injection vulnerability in index.php in PHP Dir Submit aka WebsiteSubmitter or Submitter Script allows remote authenticated users to execute arbitrary SQL commands via the aid parameter in a showarticle action...

Sql injection

SQL injection vulnerability in index.php in PHP Dir Submit aka WebsiteSubmitter or Submitter Script allows remote authenticated users to execute arbitrary SQL commands via the aid parameter in a showarticle action...

CVE-2009-3970

SQL injection vulnerability in index.php in PHP Dir Submit aka WebsiteSubmitter or Submitter Script allows remote authenticated users to execute arbitrary SQL commands via the aid parameter in a showarticle action...

CVE-2009-3970

The CVE-2009-3970 entry describes a SQL injection in index.php of PHP Dir Submit (also WebsiteSubmitter/Submitter Script). The vulnerability is triggered by the aid parameter in a showarticle action, allowing remote authenticated users to execute arbitrary SQL commands. Affected software is PHP D...

CVE-2009-3347

Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However,...

Buffer overflow

Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However,...

CVE-2009-3347

Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However,...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in onlinetools.org EasyImageCatalogue 1.3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 search and 2 d index.php parameters to index.php, 3 dir parameter to thumber.php, and the d parameter to 4 describe.php and 5...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/plugins/OnlineUsers/main.php in PageTree CMS 0.0.2 BETA 0001 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSPTConfigdirdata parameter...

PHP Dir Submit SQL Injection

====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site : http://www.phpdirsubmit.com » Founder: Mr.tro0oqy borken...

PHP Dir Submit (aid) Remote SQL Injection Vulnerability

No description provided by source. ====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site :...

PHP Dir Submit - 'aid' SQL Injection

====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site : http://www.phpdirsubmit.com » Founder: Mr.tro0oqy bork...

PHP Dir Submit - aid SQL Injection

PHP Dir Submit - aid SQL Injection ====================================================================== » Script : PHP Dir Submit Version 1.00 aid Remote SQL Injection Vuln » Language : php » Dork : Powered by PHP Dir Submit - Directory Submission Script » Script site :...

Nwahy Dir 2.1 Change Admin Password

......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...

Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit

No description provided by source. ? / Nwahy Dir v2.1 Change Admin Password Exploit - Author : rEcruit - Mail : [email protected] - Download : http://nwahy.com/showdownload-3105.html - Vuln in ./admincp/admininfo.php code $u = addslashes$COOKIE'username'; $query = mysqlquery "SELECT FROM dliladmi...

Nwahy Dir 2.1 - Arbitrary Change Admin Password

......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...

Campsite 'g_campsiteDir' Remote and Local File Inclusion Vulnerabilities

This host is running Campsite and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcampsitemultvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Campsite 'gcampsiteDir' Remote and Local File Inclusion Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Fedora 10 : gupnp-0.12.8-1.fc10 (2009-5861)

New upstream release that fixes a bug where the gupnp stack crashes when passed empty content ChangeLog here http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NE WS&id=ce714a6700ce03953a2886a66ec57db59205f4e6 Bug report here http://bugzilla.openedhand.com/showbug.cgi?id=1604 Other bugs fixed here. -...

CVE-2009-1701

Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash by destroying a...