823 matches found
wagora-disclose.txt
netVigilance Security Advisory 15 w-agora version 4.2.1 Information Disclosure Vulnerability Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. It is possible to disclose...
[ECHO_ADV_72$2007] CARE2X (root_path) Remote File Inclusion Vulnerability
ECHOADV72$2007 ------------------------------------------------------------------------- ECHOADV72$2007 CARE2X rootpath Remote File Inclusion Vulnerability -------------------------- ---------------------------------------------- Author : Dedi Dwianto a.k.a theday Date Found : March, 13th 2007...
php session extension global variable clobber
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when registerglobals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling sessiondecode on a string beginning with...
Echo Security Advisory 2007.71
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV71$2007 --------------------------------------------------------------------------- ECHOADV71$2007 AMP v3.2 basepath Remote File Inclusion Vulnerability...
CARE2X 1.1 (root_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ========================================================== CARE2X 1.1 rootpath Remote File Inclusion Vulnerability ========================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / /...
CARE2X 1.1 - ROOT_PATH Remote File Inclusion
CARE2X 1.1 - ROOTPATH Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV72$2007 ------------------------------------------------------------------------- ECHOADV72$2007 CARE2X rootpath Remote File Inclusion Vulnerability...
Activist Mobilization Platform (AMP) 3.2 - Remote File Inclusion
Activist Mobilization Platform AMP 3.2 - Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV71$2007 --------------------------------------------------------------------------- ECHOADV71$2007 AMP v3.2 basepath Remote File Inclusion...
Activist Mobilization Platform (AMP) 3.2 Remote File Include Vuln
Exploit for unknown platform in category web applications ================================================================= Activist Mobilization Platform AMP 3.2 Remote File Include Vuln ================================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y /...
[ECHO_ADV_67$2007] WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vulnerability
ECHOADV67$2007 ----------------------------------------------------------------------------------------- ECHOADV67$2007 WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...
WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vuln
Exploit for unknown platform in category web applications ================================================================ WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vuln ================================================================ \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ /...
PHP ZendEngine变量释放远程拒绝服务漏洞
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP没有对嵌套数组的深度强制任何过滤检查。由于变量注册是以迭代的方式执行的，因此PHP会接受任何深度，直到达到memorylimit。PHP数组的释放是以递归的方式执行的，因此在耗尽了栈极限的时候就会崩溃。 攻击者可以利用上述问题以可控的方式导致PHP崩溃。假设以下PHP代码： if !checkUserPWD$user, $pass $errmsg = "There is problem ..."; displayError$errmsg; notifyAdminOfCrackAttempt; else ...
webSPELL <= 4.01.02 Remote PHP Code Execution Exploit
No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; Admin id: 1 Admin hash: 7b24afc8bc80e548d66c4e7ff72171c5 Logged in wsauth=1%3A7b24afc8bc80e548d66c4e7ff72171c5 Trying to upload the malicious file Done http://localhost/webspell4.01.02/downloads/c99shell.php if$ar...
webSPELL 4.01.02 - PHP Remote Code Execution
webSPELL 4.01.02 - PHP Remote Code Execution !/usr/bin/php URL: http://www.acid-root.new.fr/ ----------------------------------------------------------------------- Usage: $argv0 -url -file Options Params: -url For example http://victim.com/webspell/ -file The file you wanna upload c99shell.php...
webSPELL <= 4.01.02 Remote PHP Code Execution Exploit
Exploit for unknown platform in category web applications ===================================================== webSPELL -file Options Params: -url For example http://victim.com/webspell/ -file The file you wanna upload c99shell.php... Options: -prefix Table prefix default=webs -upmatch The match...
STWC-Counter <= 3.4.0 (downloadcounter.php) RFI Exploit
No description provided by source. ?php //File Inclusion Exploit for Version STWC-Counter = 3.4.0.0 //Found and Exploit Coded by burncycle - burncycleathotmaildotde //| //Vendor: http://www.stwc-counter.de/ //Dork: www.stwc-counter.de //| //Bug in "downloadcounter.php": //.. //$stwcverzeichniss =...
STWC-Counter <= 3.4.0 (downloadcounter.php) RFI Exploit
No description provided by source. ?php //File Inclusion Exploit for Version STWC-Counter = 3.4.0.0 //Found and Exploit Coded by burncycle - burncycleathotmaildotde //| //Vendor: http://www.stwc-counter.de/ //Dork: www.stwc-counter.de //| //Bug in "downloadcounter.php": //.. //$stwcverzeichniss =...
php session extension global variable clobber
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when registerglobals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling sessiondecode on a string beginning with...
php session extension global variable clobber
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when registerglobals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling sessiondecode on a string beginning with...
php session extension global variable clobber
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when registerglobals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling sessiondecode on a string beginning with...