Vulnerabilities in DataLife Engine

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Abuse of Functionality и Insufficient Anti-automation уязвимостях в DataLife Engine DLE. Abuse of Functionality: http://site/index.php?do=register На странице регистрации функция "Проверить имя" позволяет выявить логины пользователей в системе...

Vulnerability in Tagcloud for DataLife Engine

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting уязвимости в плагине Tagcloud для DataLife Engine DLE. Данная уязвимость идентична XSS уязвимости в 3D Cloud для Joomla http://websecurity.com.ua/3883/. Про миллионы флешек tagcloud.swf уязвимых к XSS атакам я упоминал в своей статье XSS...

DataLife Engine 8.3 - engineajaxpm.php?config[lang] Remote File Inclusion

DataLife Engine 8.3 - engineajaxpm.php?configlang Remote File Inclusion source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...

DataLife Engine 8.3 Remote File Inclusion

======================================================================================== | Title : DataLife Engine 8.3 RFI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home :...

DataLife Engine 8.3 - engineincincludeinit.php?selected_language Remote File Inclusion

DataLife Engine 8.3 - engineincincludeinit.php?selectedlanguage Remote File Inclusion source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

DataLife Engine 8.3 - '/engine/ajax/addcomments.php?_REQUEST[skin]' Remote File Inclusion

source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks a...

DataLife Engine 8.3 - '/engine/ajax/pm.php?config[lang]' Remote File Inclusion

source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks a...

DataLife Engine 8.3 - engineajaxaddcomments.php?_REQUEST[skin] Remote File Inclusion

DataLife Engine 8.3 - engineajaxaddcomments.php?REQUESTskin Remote File Inclusion source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...

DataLife Engine 8.3 - engineinchelp.php?config[langs] Remote File Inclusion

DataLife Engine 8.3 - engineinchelp.php?configlangs Remote File Inclusion source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a...

DataLife Engine 8.3 - '/engine/inc/help.php?config[langs]' Remote File Inclusion

source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks a...

DataLife Engine 8.3 - '/engine/inc/include/init.php?selected_language' Remote File Inclusion

source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks a...

CVE-2009-3055

PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine DLE 8.2 allows remote attackers to execute arbitrary PHP code via a URL in the dleconfigapi parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine DLE 8.2 allows remote attackers to execute arbitrary PHP code via a URL in the dleconfigapi parameter...

CVE-2009-3055

CVE-2009-3055 affects DataLife Engine (DLE) 8.2 , with a vulnerability in engine/api/api.class.php that allows remote code execution via a URL in the dle_config_api parameter. Root cause: PHP remote file inclusion . Impact: partial impact on confidentiality , integrity , and availability as state...

CVE-2009-3055

PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine DLE 8.2 allows remote attackers to execute arbitrary PHP code via a URL in the dleconfigapi parameter...

CVE-2009-3055: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in engine/api/api.class.php in DataLife Engine DLE 8.2 allows remote attackers to execute arbitrary PHP code via a URL in the dleconfigapi parameter...

DataLife Engine 8.2 dle_config_api Remote File Inclusion Vulnerability

No description provided by source. ====================================================== DatalifeEngine 8.2 Remote File Inclusion Vulnerability ! Found by : kurdish hackers team ! C0ntact : pshela at YaHoo .com ! Groups : Kurd-Team ! site : www.kurdteam.org...

DataLife Engine 8.2 - dle_config_api Remote File Inclusion

DataLife Engine 8.2 - dleconfigapi Remote File Inclusion ====================================================== DatalifeEngine 8.2 Remote File Inclusion Vulnerability Found by : kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org...

DataLife Engine 8.2 dle_config_api Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== DataLife Engine 8.2 dleconfigapi Remote File Inclusion Vulnerability ======================================================================...

DataLife Engine 8.2 - dle_config_api Remote File Inclusion

====================================================== DatalifeEngine 8.2 Remote File Inclusion Vulnerability Found by : kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org ======================================================= +++++++++++++++++++ Scrip...