1203 matches found
dvbbs7. 0 and 8. 0 access backstage to get webshell-vulnerability warning-the black bar safety net
Create a new database file, named a. mdb Create a new text file, 命名为b.txt and write the word Trojan At the command line enter the command copy a. mdb/b+b. txt/b c. mdb Get the c. mdb is already inserted into the word Trojan in the database Then in the posting the place to upload attachments, the...
Iamma Simple Gallery 1.0/2.0 Arbitrary File Upload Vulnerability
No description provided by source. Found by: X0r Iamma Simple Gallery Arbitrary File Upload Version: 1,2 ? Email: evolutionteam.x0atgmaildotcom Script Download:http://www.matteoiammarrone.com/public/modules.php?name=Downloads&dop=getit&lid=4 Script Download...
Iamma Simple Gallery 1.02.0 - Arbitrary File Upload
Iamma Simple Gallery 1.02.0 - Arbitrary File Upload Found by: X0r Iamma Simple Gallery Arbitrary File Upload Version: 1,2 ? Email: evolutionteam.x0atgmaildotcom Script Download:http://www.matteoiammarrone.com/public/modules.php?name=Downloads&dop=getit&lid=4 Script Download...
PHP FastCGI模块文件扩展拒绝服务漏洞
BUGTRAQ ID: 31612 CVE ID：CVE-2008-3660 CNCVE ID：CNCVE-20083660 PHP FastCGI是一款用于提高PHP性能的模块。 PHP FastCGI不正确处理部分文件请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 1，ext/gd's imageloadfont函数存在溢出。 2，PHP内部memnstr函数作为explode函数导出到用户空间存在溢出。 这些函数接收部分webapps中用户提供的数据，可远程利用。 S.u.S.E. UnitedLinux 1.0 S.u.S.E. SuSE Linux Standard...
Seagull PHP Framework <= 0.6.4 (fckeditor) Arbitrary File Upload Exploit
No description provided by source. ?php / ------------------------------------------------------------------------ Seagull PHP Framework = 0.6.4 fckeditor Arbitrary File Upload Exploit ------------------------------------------------------------------------ author...: EgiX mail.....:...
Seagull PHP Framework <= 0.6.4 (fckeditor) Arbitrary File Upload Exploit
Exploit for unknown platform in category web applications ======================================================================== Seagull PHP Framework = 0.6.4 fckeditor Arbitrary File Upload Exploit ======================================================================== ?php /...
cmsworks-upload.txt
array"zip","doc","xls","pdf","rtf","csv","jpg","gif","jpeg","png","avi","mpg","mpeg","swf","fla", with a default configuration of this script, an attacker might be able to upload arbitrary files containing malicious PHP code due to multiple file extensions isn't properly checked / errorreporting0...
cmsWorks 2.2 RC4 - 'FCKeditor' Arbitrary File Upload
array"zip","doc","xls","pdf","rtf","csv","jpg","gif","jpeg","png","avi","mpg","mpeg","swf","fla", with a default configuration of this script, an attacker might be able to upload arbitrary files containing malicious PHP code due to multiple file extensions isn't properly checked / errorreporting0...
Achievo 1.3.2 - FCKeditor Arbitrary File Upload
Achievo 1.3.2 - FCKeditor Arbitrary File Upload array"zip","doc","xls","pdf","rtf","csv","jpg","gif","jpeg","png","avi","mpg","mpeg","swf","fla", with a default configuration of this script, an attacker might be able to upload arbitrary files containing malicious PHP code due to multiple file...
cmsmadesimple-upload.txt
?php / --------------------------------------------------------------------------- CMS Made Simple = 1.2.4 FileManager module Arbitrary File Upload Exploit --------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
Coppermine <=1.4.16 [Content-type] SQL-injection Exploit
Coppermine =1.4.16 Content-type SQL-injection Exploit 1 Дата: Найдена: April 9, 2008 Пропатчена: April 11, 2008 http://forum.coppermine-gallery.net/index.php/topic,51787.0.html 2 Продукт: Coppermine Photo Gallery =1.4.16 3 Уязвимость: SQL-injection в Content-type при загрузке удаленных файлов...
phpCMS 1.2.2 (parser.php file) Remote File Disclosure Vulnerability
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-005 Application: phpCMS Versions Affected: 1.2.2 Vendor URL: http://www.phpcms.de Bug: Remote File Disclosure, Get admin password Exploits: YES Reported: 10.01.2008 Vendor response: 12.01.2008 Date of...
phpCMS 1.2.2 - 'file' Remote File Disclosure
Digital Security Research Group DSecRG Advisory DSECRG-08-005 Application: phpCMS Versions Affected: 1.2.2 Vendor URL: http://www.phpcms.de Bug: Remote File Disclosure, Get admin password Exploits: YES Reported: 10.01.2008 Vendor response: 12.01.2008 Date of Public Advisory: 29.01.2008 Authors:...
phpMyClub 0.0.1 (page_courante) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== phpMyClub 0.0.1 pagecourante Local File Inclusion Vulnerability ================================================================== phpMyClub Local File Inclusion...
CVE-2008-0455
Cross-site scripting XSS vulnerability in the modnegotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote authenticated users to inject arbitrary web script or HTML by...
PT-2008-2087 · Apache +2 · Apache Http Server +2
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 1.3.39 and earlier, 2.0.61 and earlier, 2.2.6 and earlier Description: A cross-site scripting XSS issue exists in the mod negotiation module, allowing remote authenticated users to inject arbitrary web script or HT...
Debian Security Advisory DSA 1125-1 (drupal)
The remote host is missing an update to drupal announced via advisory DSA 1125-1. Several remote vulnerabilities have been discovered in the Drupal web site platform, which may lead to the execution of arbitrary web script. The Common Vulnerabilities and Exposures project identifies the following...
Apache 2.2.6 (Windows) - Share PHP File Extension Mapping Information Disclosure
source: https://www.securityfocus.com/bid/26939/info Apache is prone to an information-disclosure vulnerability. This issue occurs because Apache fails to properly associate file extensions with the correct engines when handling specially crafted requests for files on Windows SMB shares. Attacker...
Uber Uploader <= 5.3.6 Remote File Upload Vulnerability
Uber Uploader = 5.3.6 Remote File Upload Vulnerability Download: http://sourceforge.net/projects/uber-uploader Bug found by JosS / Jose Luis Gуngora Fernбndez Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure .vuln/ There isn'...
Directory traversal
c32web.exe in McMurtrey/Whitaker Cart32 before 6.4 allows remote attackers to read arbitrary files via the ImageName parameter in a GetImage action, by appending a NULL byte %00 sequence followed by an image file extension, as demonstrated by a request for a ".txt%00.gif" file. NOTE: this might b...