Podcast Generator <= 1.1 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " Podcast Generator = 1.1 Remote Code Execution Vendor: http://podcastgen.sourceforge.net Exploit Author: BlackHawk Author's Site: http://itablackhawk.altervista.org Credits goes to RGod for the code Thanks to Marija...

Podcast Generator 1.1 - Remote Code Execution

!/usr/bin/php -q -d shortopentag=on $file.$ext $Ldeleted"; --------------------------- no check for admin rights, so now we can delete whatever file we want, with any exstension.. so let's delete config.php and make a rfesh new installation with a password set by us! the RCE is triggered in...

Podcast Generator <= 1.1 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ====================================================== Podcast Generator $file.$ext $Ldeleted"; --------------------------- no check for admin rights, so now we can delete whatever file we want, with any exstension.. so let's delete...

Ubuntu Update for linux-source-2.6.17 vulnerabilities USN-486-1

Ubuntu Update for Linux kernel vulnerabilities USN-486-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4861.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.17 vulnerabilities USN-486-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for linux-source-2.6.15 vulnerability USN-489-1

Ubuntu Update for Linux kernel vulnerabilities USN-489-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4891.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15 vulnerability USN-489-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for linux-source-2.6.20 vulnerabilities USN-470-1

Ubuntu Update for Linux kernel vulnerabilities USN-470-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4701.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.20 vulnerabilities USN-470-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for bind9 vulnerability USN-491-1

Ubuntu Update for Linux kernel vulnerabilities USN-491-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4911.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for bind9 vulnerability USN-491-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-489-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-508-1

Ubuntu Update for Linux kernel vulnerabilities USN-508-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5081.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-508-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-508-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Big Faceless Report Generator存在未明漏洞

BUGTRAQ ID: 34007 CNCAN ID：CNCAN-2009030601 Big Faceless Report Generator是一款Java控件，用于将XML文件转换为PDF文件。 Big Faceless Report Generator在处理JavaScript时存在一个未明漏洞。 目前没有详细漏洞细节提供。 Big Faceless Organization Big Faceless Report Generator 1.11.39 Big Faceless Organization Big Faceless Report Generator 1.1.41...

CVE-2008-6421

PHP remote file inclusion vulnerability in socialgameplay.php in Social Site Generator SSG 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Sql injection

Multiple SQL injection vulnerabilities in Social Site Generator SSG 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 sgcid parameter to displayblog.php, 2 scmmemid parameter to socialmyprofiledownload.php, and the 3 catid parameter to socialforumsubcategories.php...

Code injection

Social Site Generator SSG 2.0 allows remote attackers to read arbitrary files via the file parameter to 1 filedload.php, 2 webadmin/download.php, and 3 webadmin/downloadfile.php...

CVE-2008-6420

Social Site Generator SSG 2.0 allows remote attackers to read arbitrary files via the file parameter to 1 filedload.php, 2 webadmin/download.php, and 3 webadmin/downloadfile.php...

CVE-2008-6421

PHP remote file inclusion vulnerability in socialgameplay.php in Social Site Generator SSG 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2008-6420

The CVE-2008-6420 entry concerns Social Site Generator (SSG) 2.0. The vulnerability allows remote attackers to read arbitrary files via the file parameter to (1) filedload.php, (2) webadmin/download.php, and (3) webadmin/download_file.php. The impact is described as partial confidentiality leakag...

CVE-2008-6419

CVE-2008-6419 concerns multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 . The vulnerabilities allow remote attackers to send crafted input to vulnerable parameters in PHP scripts, enabling execution of arbitrary SQL commands: (1) sgc_id via display_blog.php, (2) scm_mem_i...

CVE-2008-6421

CVE-2008-6421: A PHP remote file inclusion vulnerability in Social Site Generator (SSG) 2.0, via the path parameter in social_game_play.php, allows a remote attacker to execute arbitrary PHP code. Affected software/component: Social Site Generator 2.0; vulnerability type: remote file inclusion. I...

CVE-2008-6419

Multiple SQL injection vulnerabilities in Social Site Generator SSG 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 sgcid parameter to displayblog.php, 2 scmmemid parameter to socialmyprofiledownload.php, and the 3 catid parameter to socialforumsubcategories.php...