CVE-2003-1347

Geeklog 1.3.7 is affected by multiple XSS vulnerabilities. Attackers can inject arbitrary script via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage field. The CVE-2003-1347 entry documents these issues and their cross-site scripting...

CVE-2003-1347

Multiple cross-site scripting XSS vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the 1 cid parameter to comment.php, 2 uid parameter to profiles.php, 3 uid to users.php, and 4 homepage field...

CVE-2003-1347: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the 1 cid parameter to comment.php, 2 uid parameter to profiles.php, 3 uid to users.php, and 4 homepage field...

Geeklog CAPTCHA Plugin _CONF[path]远程文件包含漏洞

No description provided by source...

Remote file inclusion

PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathsystem parameter...

CVE-2007-2793

PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathsystem parameter...

CVE-2007-2793

CVE-2007-2793 affects Geeklog 2.x via a Remote PHP File Inclusion in the ImageImageMagick.php component. The underlying issue is that an attacker can supply a URL in glConf[path_system], allowing arbitrary PHP code execution on the server. Related materials document an exploitation entry (GEEKLOG...

CVE-2007-2793: Undefined Security Weakness

PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathsystem parameter...

CVE-2007-2793

PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConfpathsystem parameter...

geeklog2-rfi.txt

-------------------------------- 05/18/2007 --------------------------------- GeekLog 2. ImageImageMagick.php RFI Vuln ----------------------------------- ASCII ----------------------------------- / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / -dsd863 at yahoo.com-...

Geeklog ImageImageMagick.PHP远程文件包含漏洞

Geeklog是一款基于PHP的WEB应用程序。 Geeklog不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'ImageImageMagick.php'脚本对用户提交的'glConfpathsystem'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Geeklog 2.x 目前没有解决方案提供： http://www.geeklog.net/...

GeekLog 2.x ImageImageMagick.php Remote File Inclusion Vulnerability

No description provided by source. -------------------------------- 05/18/2007 --------------------------------- GeekLog 2. ImageImageMagick.php RFI Vuln ----------------------------------- ASCII ----------------------------------- / / / / &nbsp...

GeekLog 2.x - ImageImageMagick.php Remote File Inclusion

GeekLog 2.x - ImageImageMagick.php Remote File Inclusion -------------------------------- 05/18/2007 --------------------------------- GeekLog 2. ImageImageMagick.php RFI Vuln ----------------------------------- ASCII ----------------------------------- / / / / / / / / / / / / / / / / / / / / / /...

GeekLog 2.x - 'ImageImageMagick.php' Remote File Inclusion

-------------------------------- 05/18/2007 --------------------------------- GeekLog 2. ImageImageMagick.php RFI Vuln ----------------------------------- ASCII ----------------------------------- / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / -dsd863 at yahoo.com-...

GeekLog 2.x ImageImageMagick.php Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== GeekLog 2.x ImageImageMagick.php Remote File Inclusion Vulnerability ==================================================================== --------------------------------...

Remote file inclusion

PHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier for Geeklog allows remote attackers to execute arbitrary PHP code via a URL in the MGCONFpathhtml parameter...

CVE-2007-2706

CVE-2007-2706 affects Geeklog’s Media Gallery (version 1.4.8a and earlier). The vulnerability is a PHP remote file inclusion in maint/ftpmedia.php that allows an attacker to execute arbitrary PHP code through a URL in the _MG_CONF[path_html] parameter. Root cause is a remote file inclusion flaw i...

Media Gallery for Geeklog <= 1.4.8a Remote File Inclusion Vulnerability

No description provided by source. Media Gallery =v1.4 Remote file inclusion Download script : http://switch.dl.sourceforge.net/sourceforge/mediagallery/mediagallery-1.4.6-1.3.11.tar.gz Thanks Str0ke Exploit : http://victime.com/mediagallery/publichtml/maint/ftpmedia.php?MGCONFpathhtml= shell.txt...

Media Gallery for Geeklog 1.4.8a - Remote File Inclusion

Media Gallery for Geeklog 1.4.8a - Remote File Inclusion Media Gallery =v1.4 Remote file inclusion Download script : http://switch.dl.sourceforge.net/sourceforge/mediagallery/mediagallery-1.4.6-1.3.11.tar.gz Thanks Str0ke Exploit :...

Geeklog远程文件包含漏洞

Geeklog是一款基于PHP的WEB应用程序。 Geeklog不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'glConfpathlibraries'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Geeklog 2.0 目前没有解决方案提供： http://geeklog.sourceforge.net/ http://www.example.com/path/Geeklog/MVCnPHP/BaseView.php?glConfpathlibraries=attacker site...