CVE-2007-2178

CVE-2007-2178 affects Objective Development Sharity prior to 3.3. The vulnerability set allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors. The connected documents provide the affected product and impact but do not specify the root cause, exact exploit vec...

CVE-2007-2178

Multiple unspecified vulnerabilities in Objective Development Sharity before 3.3 allow remote attackers to cause a denial of service daemon crash via unspecified vectors...

CVE-2007-2089

Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to comarticles.php in 1 components/ or 2 classes/html/...

CVE-2007-2089

Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to comarticles.php in 1 components/ or 2 classes/html/...

CVE-2007-2089

The CVE-2007-2089 entry covers multiple PHP remote file inclusion (RFI) vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo/Joomla!. The underlying issue is unsafe handling of the absolute_path parameter to com_articles.php, in either components/ or classes/html/, al...

joomlanew-rfi.txt

======================================================= Mambo/Joomla Component New Article Component = 1.1 absolutepath Multiple RFI ======================================================= Found By : Cold z3ro , [email protected] ======================================================= Homepag...

PHP Hash_Update_File释放资源访问代码执行漏洞

PHP是一款广泛使用的WEB开发脚本语言。 PHP hashupdatefile存在设计错误，远程攻击者可能利用此漏洞获得对释放内存的访问并使用恶意数据覆盖而执行任意代码。 问题存在于GD函数中，在通过资源识别器获得资源数据后，可能用usercode来中断PHP函数，usercode就会会破坏资源，并获取与其内存相同位置来分配PHP字符串相同大小的空间作为释放资源。这个字符串可以用于建立特定构建的资源，以允许利用内部PHP函数，当恶意中断终止函数时，会继续使用替代资源数据。导致任意代码执行。 要获得需要的函数中断，通常需要放置对象到函数的某个参数中，这会在转化一个超长值时触发PHP错误。...

PHP GD扩展访问已释放资源漏洞

PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP GD资源使用的机制上存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。...

[ECHO_ADV_72$2007] CARE2X (root_path) Remote File Inclusion Vulnerability

ECHOADV72$2007 ------------------------------------------------------------------------- ECHOADV72$2007 CARE2X rootpath Remote File Inclusion Vulnerability -------------------------- ---------------------------------------------- Author : Dedi Dwianto a.k.a theday Date Found : March, 13th 2007...

Talking about virtual communities, security bug found and exploit-vulnerability warning-the black bar safety net

Author:Wang gang This article published in the hacker Handbook magazine http://www.nohack.cn that the copyright of all, reproduced please indicate the source. Personal website: www.itheroes.cn Now on the network Forum and community there are many, the Forum, the vast majority are using some free ...

Company WebSite Builder PRO 1.9.8 - 'INCLUDE_PATH' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV76$2007 -------------------------------------------------------------------------------------------- ECHOADV76$2007 Company WebSite Builder PRO INCLUDEPATH Remote File Inclusion Vulnerability...

Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== Groupit 2.00b5 cbasepath Remote File Inclusion Vulnerability ===============================================================...

Groupit 2.00b5 - c_basepath Remote File Inclusion

Groupit 2.00b5 - cbasepath Remote File Inclusion ------------------------------------------------------------------------------------- ECHOADV75$2007 Groupit 2.00b5 cbasepath Remote File Inclusion Vulnerability -------------------------------------- ----------------------------------------------...

Groupit 2.00b5 - 'c_basepath' Remote File Inclusion

------------------------------------------------------------------------------------- ECHOADV75$2007 Groupit 2.00b5 cbasepath Remote File Inclusion Vulnerability -------------------------------------- ---------------------------------------------- Author : Dedi Dwianto a.k.a theday Date Found :...

Echo Security Advisory 2007.71

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV71$2007 --------------------------------------------------------------------------- ECHOADV71$2007 AMP v3.2 basepath Remote File Inclusion Vulnerability...

[ECHO_ADV_71$2007] AMP v3.2 (base_path) Remote File Inclusion Vulnerability

ECHOADV71$2007 --------------------------------------------------------------------------- ECHOADV71$2007 AMP v3.2 basepath Remote File Inclusion Vulnerability --------------------------------------------------------------------------- Author : Dedi Dwianto a.k.a theday Date Found : March, 13th...

Activist Mobilization Platform (AMP) 3.2 - Remote File Inclusion

Activist Mobilization Platform AMP 3.2 - Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV71$2007 --------------------------------------------------------------------------- ECHOADV71$2007 AMP v3.2 basepath Remote File Inclusion...

Activist Mobilization Platform (AMP) 3.2 - Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV71$2007 --------------------------------------------------------------------------- ECHOADV71$2007 AMP v3.2 basepath Remote File Inclusion Vulnerability...

WebCreator 0.2.6-rc3 - 'moddir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV74$2007 ------------------------------------------------------------------------------------- ECHOADV74$2007 WebCreator ---------------------------------------------------------- Input passed to the "$moddir"...

PHP import_request_variables()函数任意变量覆盖漏洞

PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的importrequestvariables函数实现上存在漏洞，远程攻击者可能利用此漏洞控制服务器。 远程攻击者可以利用PHP的importrequestvariables函数覆盖$和$变量（任意php变量），导致执行任意代码。有漏洞代码位于以下文件中： ./ext/standard/basicfunctions.c:PHPFUNCTIONimportrequestvariables ./Zend/zendhash.c:ZENDAPI void...