BackUpWordPress Bkpwp_Plugin_Path远程文件包含漏洞

BackUpWordPress是一款基于PHP的WEB应用程序。 BackUpWordPress不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于脚本对用户提交的'BkpwpPluginPath'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 Designpraxis BackUpWordPress 0.4.2b 目前没有详细解决方案提供： http://wordpress.designpraxis.at/plugins/backupwordpress/...

scWiki 1.0 Beta 2 (common.php pathdot) Remote File Inclusion Vuln

No description provided by source. scWiki 1.0 Beta 2 common.php pathdot Remote File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/sc-wiki/scwikibeta2.zip POC : /includes/common.php?pathdot=Shell sebug.net...

Joomla! Component mp3 allopass 1.0 - Remote File Inclusion

Joomla! Component mp3 allopass 1.0 - Remote File Inclusion commp3allopass joomla component Remote File Include Vulnerability Component : commp3allopass Download file : http://www.joomlaratings.com Dicovered by : NoGe Contact : [email protected]...

Buffer overflow

Buffer overflow in Next Generation Software Virtual DJ VDJ 5.0 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file...

CVE-2007-4734

Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file...

CVE-2007-4735

CVE-2007-4735 describes a buffer overflow in Next Generation Software’s Virtual DJ (VDJ) 5.0. The vulnerability allows user-assisted remote attackers to execute arbitrary code via a long file path in an M3U playlist. The provided documents identify the affected product and the root cause (buffer ...

CVE-2007-4734: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3u file...

SOTEeSKLEP <= 3.5RC9 (file) Remote File Disclosure Vulnerability

No description provided by source. SOTEeSKLEP Remote File Disclosure Vulnerability Script : SOTEeSKLEP Versions: 3.1RC8, 3.5RC1, 3.5RC4, 3.5RC9, and i think other. Site : http://www.sote.pl Bug: ... if ! empty$REQUEST"file" $file=$REQUEST'file';...

soteesklep-disclose.txt

SOTEeSKLEP Remote File Disclosure Vulnerability Script : SOTEeSKLEP Versions: 3.1RC8, 3.5RC1, 3.5RC4, 3.5RC9, and i think other. Site : http://www.sote.pl Bug: ... if ! empty$REQUEST"file" $file=$REQUEST'file'; ... $filepath="$DOCUMENTROOT/themes/$config-lang/htmlfiles/$file"; if...

SOTEeSKLEP <= 3.5RC9 (file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ SOTEeSKLEP lang/htmlfiles/$file"; if fileexists$filepath $fd=fopen$filepath,"r"; $data=fread$fd,filesize$filepath; print $data; fclose$fd; ... Dork: inurl:"/go/files/?file="...

SOTEeSKLEP 3.5RC9 - 'file' Remote File Disclosure

SOTEeSKLEP Remote File Disclosure Vulnerability Script : SOTEeSKLEP Versions: 3.1RC8, 3.5RC1, 3.5RC4, 3.5RC9, and i think other. Site : http://www.sote.pl Bug: ... if ! empty$REQUEST"file" $file=$REQUEST'file'; ... $filepath="$DOCUMENTROOT/themes/$config-lang/htmlfiles/$file"; if...

Musoo GLOBALS[ini_array]参数远程文件包含漏洞

Musoo是一款基于PHP的WEB应用程序。 Musoo不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于脚本对用户提交的'GLOBALSiniarray'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Musoo Musoo 0.21 目前没有详细解决方案提供： http://www.tryag.com/cc http://www.example.com/path/msDb.php?GLOBALSiniarrayEXTLIBPATH=Shell.txt?...

PHP::HTML 0.6.4 - PHPhtml.php Remote File Inclusion

PHP::HTML 0.6.4 - PHPhtml.php Remote File Inclusion phphtml v 0.6.4 FOUND BY : o0xxdark0o Website: http://www.sitellite.org/ DOWNLOAD : http://sourceforge.net/projects/phphtml REMOTE FILE INCLUDE FILE : PATH\phphtml.php EXP: xxx.com\path\phphtml.php?htmlclasspath=SH3ll.txt? CODE: on line 19 rende...

Analysis upload vulnerability-vulnerability warning-the black bar safety net

This article sent to the hacker line of Defense of 2006.4 period, reproduced please indicate the Analysis upload vulnerability in the form English / the loneliness of the hedgehog In a brief introduction through the injection vulnerability check and fill, following the coupling re-introduce a...

eTrust AntiVirus Agent r8 - Local Privilege Escalation

/ ---------------------------------------------------------------------- | 48Bits Advisory -=- Privilege Elevation in eTrust Antivirus Agent r8 | ---------------------------------------------------------------------- Affected versions : I have tested with: - eTrust Antivirus Agent r8 -...

CVE-2007-2412

The CVE-2007-2412 issue affects Seir Anphin, specifically the modules/file.php component. It describes a directory traversal vulnerability where an attacker can obtain sensitive information via the a[filepath] parameter by manipulating file paths with .. (dot dot). The core concern is that a user...

Web Slider 0.6 (path) Remote File Inclusion Vulnerabilities

No description provided by source. Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell...

Joomla/Mambo Component SWmenuFree 4.0 RFI Vulnerability

No description provided by source. MAMBO Modules SWmenu 4.0 ImageManager.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8109/comswmenufree4.0.zip file : /ImageManager/Classes/ImageManager.php Dork : index.php?option=comswmenupro Found by & Contact : Cold...

Active PHP Bookmark Notes &lt;= 0.2.5 Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl Active PHP Bookmark Notes 0.2.5 = Remote File Inclusion Exploit Download S: http://sourceforge.net/projects/apbn/ Discovered & Coded by: GloDM = Mahmoodali perl GloD.pl target cmd shell location cmd shell variable cmd shell example:...

RRDBrowse &lt;= 1.6 Remote Arbitrary File Disclosure Vulnerability

No description provided by source. I - TITLE Security advisory: Arbitrary file disclosure vulnerability in rrdbrowse II - SUMMARY Description: Arbitrary file disclosure vulnerability in rrdbrowse = 1.6 Author: Sebastian Wolfgarten sebastian at wolfgarten dot com, http://www.devtarget.org Date:...