CVE-2009-1847

CVE-2009-1847 affects Easy PX 41 CMS 9.0 B1, with a vulnerability in index.php that allows directory traversal via the fiche parameter, enabling remote inclusion/execution of local files. The provided documents do not specify affected subversions beyond the product/version, nor a patch or workaro...

CVE-2009-1847: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the fiche parameter...

Easy Px 41 CMS v09.00.00B1 (fiche) Local File Inclusion Vulnerability

No description provided by source. Easy Px 41 CMS v09.00.00B1 fiche Local File Include Exploit D.Script: http://www.easy-script.com/scripts-dl/EPX41v9.zip Discovered by: ThE g0bL!N Greetz To: ALL My Friend dz Exploit: /path/?view=LivreDor&fiche=../../../../../../../../etc/passwd%00 Demo...

Easy Px 41 CMS v09.00.00B1 (fiche) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Easy Px 41 CMS v09.00.00B1 fiche Local File Inclusion Vulnerability ===================================================================== Easy Px 41 CMS v09.00.00B1 fich...

Easy Px 41 CMS Local File Inclusion

Easy Px 41 CMS v09.00.00B1 fiche Local File Include Exploit D.Script: http://www.easy-script.com/scripts-dl/EPX41v9.zip Discovered by: ThE g0bL!N Greetz To: ALL My Friend dz Exploit: /path/?view=LivreDor&fiche=../../../../../../../../etc/passwd%00 Demo...

MyForum 1.3 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. + MyForum 1.3 Auth Bypass Remote SQL Injection + Discovered By : ThE g0bL!N + Greetz : All my freind + Note: Tested On localhost : + http://www.easy-script.com/scripts-dl/myforumv1.3.zip Exploit: ------- Username: realadminname Password:' or '1=1 Or Username:...

Easy Px 41 CMS 09.00.00B1 - 'fiche' Local File Inclusion

Easy Px 41 CMS v09.00.00B1 fiche Local File Include Exploit D.Script: http://www.easy-script.com/scripts-dl/EPX41v9.zip Discovered by: ThE g0bL!N Greetz To: ALL My Friend dz Exploit: /path/?view=LivreDor&fiche=../../../../../../../../etc/passwd%00 Demo...

Easy Px 41 CMS 09.00.00B1 - fiche Local File Inclusion

Easy Px 41 CMS 09.00.00B1 - fiche Local File Inclusion Easy Px 41 CMS v09.00.00B1 fiche Local File Include Exploit D.Script: http://www.easy-script.com/scripts-dl/EPX41v9.zip Discovered by: ThE g0bL!N Greetz To: ALL My Friend dz Exploit:...

MyForum 1.3 SQL Injection

MyForum 1.3 Auth Bypass Remote SQL Injection + Discovered By : ThE g0bL!N + Greetz : All my freind + Note: Tested On localhost : + http://www.easy-script.com/scripts-dl/myforumv1.3.zip Exploit: ------- Username: realadminname Password:' or '1=1 Or Username: realadminname' or '1=1 Password:ThE...

MyForum 1.3 - Authentication Bypass

MyForum 1.3 - Authentication Bypass + MyForum 1.3 Auth Bypass Remote SQL Injection + Discovered By : ThE g0bL!N + Greetz : All my freind + Note: Tested On localhost : + http://www.easy-script.com/scripts-dl/myforumv1.3.zip Exploit: ------- Username: realadminname Password:' or '1=1 Or Username:...

MyForum 1.3 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ MyForum 1.3 Auth Bypass Remote SQL Injection Vulnerability ============================================================ + MyForum 1.3 Auth Bypass Remote SQL Injection + Discovere...

HP Remote Graphics Software unauthorized access

Unauthorized access with Easy Login option enabled...

HPSBMA02427 SSRT090069 rev.1 - HP Remote Graphics Software (RGS) Sender Running Easy Login, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01731970 Version: 1 HPSBMA02427 SSRT090069 rev.1 - HP Remote Graphics Software RGS Sender Running Easy Login, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should b...

Code injection

Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software RGS 4.0.0 through 5.2.4 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-0721

Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software RGS 4.0.0 through 5.2.4 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2009-0721

CVE-2009-0721 affects HP Remote Graphics Software (RGS) Sender with Easy Login, v4.0.0–v5.2.4. An unspecified vulnerability in Easy Login allows remote code execution by an attacker over the network. HP’s Security Bulletin HPSBMA02427 rev.1 documents a fix: update to RGS v5.2.5 or later, or disab...

CVE-2009-1663

Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/username directory...

CVE-2009-1664

myaccount.php in Easy Scripts Answer and Question Script does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and gain privileges via modified userid, txtpassword, and txtRpassword parameters...

Code injection

myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a modified userid parameter without specifying any additional fields...

Unrestricted file upload

Unrestricted file upload vulnerability in myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads/username directory...