CVE-2005-0089

The SimpleXMLRPCServer library module in Python 2.2, 2.3 before 2.3.5, and 2.4, when used by XML-RPC servers that use the registerinstance method to register an object without a dispatch method, allows remote attackers to read or modify globals of the associated module, and possibly execute...

PT-2005-1198 · Python +1 · Python +2

Name of the Vulnerable Software and Affected Versions: Python versions 2.2, 2.3 before 2.3.5, and 2.4 Description: The issue allows remote attackers to read or modify globals of the associated module, and possibly execute arbitrary code, via dotted attributes, when the SimpleXMLRPCServer library...

CVE-2005-0075

prefs.php in SquirrelMail before 1.4.4, with registerglobals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers...

vBulletin includes/init.php Unspecified Vulnerability

According to its banner, the remote version of vBulletin is vulnerable to an unspecified issue. It is reported that versions 3.0.0 through to 3.0.4 are prone to a security flaw in 'includes/init.php'. Successful exploitation requires that PHP's 'registerglobals' setting be enabled. %NASLMINLEVEL...

[SA13769] Zeroboard "dir" File Inclusion Vulnerability

TITLE: Zeroboard "dir" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA13769 VERIFY ADVISORY: http://secunia.com/advisories/13769/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Zeroboard 4.x http://secunia.com/product/4457/ DESCRIPTION: Optik4Lab has reported a...

GLSA-200402-01 : PHP setting leaks from .htaccess files on virtual hosts

The remote host is affected by the vulnerability described in GLSA-200402-01 PHP setting leaks from .htaccess files on virtual hosts If the server configuration 'php.ini' file has 'registerglobals = on' and a request is made to one virtual host which has 'phpadminflag registerglobals off' and the...

Mantis Bug Tracker 0.19 - Remote Server-Side Script Execution

Mantis Bug Tracker 0.19 - Remote Server-Side Script Execution source: https://www.securityfocus.com/bid/10993/info Mantix is reportedly susceptible to a remote server-side script execution vulnerability. This vulnerability only presents itself when PHP is configured on the hosting computer with...

Mantis Bug Tracker 0.19 - Remote Server-Side Script Execution

source: https://www.securityfocus.com/bid/10993/info Mantix is reportedly susceptible to a remote server-side script execution vulnerability. This vulnerability only presents itself when PHP is configured on the hosting computer with 'registerglobals = on'. When PHP is configured to register glob...

security flaw

The memorylimit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when registerglobals is enabled, allows remote attackers to execute arbitrary code by triggering a memorylimit abort during execution of the zendhashinit function and overwriting a...

security flaw

The memorylimit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when registerglobals is enabled, allows remote attackers to execute arbitrary code by triggering a memorylimit abort during execution of the zendhashinit function and overwriting a...

[waraxe-2004-SA#034 - XSS and path full path disclosure in PhpBB 2.0.8]

================================================================================ waraxe-2004-SA034 ================================================================================ XSS and full path disclosure in PhpBB 2.0.8...

[waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615]

================================================================================ waraxe-2004-SA031 ================================================================================ Multiple vulnerabilities in e107 version 0.615...

waraxe-2004-SA031.txt

================================================================================ waraxe-2004-SA031 ================================================================================ Multiple vulnerabilities in e107 version 0.615...

Arbitrary code inclusion in phpShop

A vulnerability has been discovered in the popular E-Commerce package 'phpShop'. The vulnerability's details are available in the attached advisory, or at http://www.fribble.net/advisories/phpshop29-04-04.txt Due to the nature of this vulnerability, I notified the lead programmer for this package...

SCSA028.txt

================================================= Security Corporation Security Advisory SCSA-028 Nuked-Klan Multiple Vulnerabilities ================================================= PROGRAM: Nuked-KlaN HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: b1.4, b1.5, SP2 RISK: MEDIUM/HIGH...

CVE-2004-0132: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using 1 the GLOBALSrootdp parameter to db.php, or 2 the GLOBALSlanguagehome parameter to archivednews.php, and a...

CVE-2003-1385

ipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code, if registerglobals is enabled, by modifying the rootpath parameter to reference a URL on a remote web server that contains the code...

pMachine.txt

Informations : °°°°°°°°°°°°° Language : PHP Version : Free 2.2.1 Website : http://www.pmachine.com Problem : Include Security Hole PHP Code/Location : °°°°°°°°°°°°°°°°°°° This will work if registerglobals is ON OR OFF. /pm/lib.inc.php : ------------------------------------------------------------...

Truegalerie admin.php loggedin Parameter Admin Authentication Bypass

The remote host is running TrueGalerie, an album management system written in PHP. There is a flaw in the version of TrueGalerie that could allow an attacker to log in as the administrator without having to know the password, simply by requesting the URL : /admin.php?loggedin=1 Provided PHP's...

Two Invision Power Board 1.1.x vulns

Hola, Invision Power Services have continued to show their amazing support and understanding for the security community by release two patches for their 'Invision Power Board' product now one of the most widely used 'Board' programs around. Without sending out any security mailing list...