249 matches found
CVE-2013-7113
epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service application crash via a crafted packet...
dedecms latest version of the modify any of the administrator vulnerability+getshell+exp-vulnerability warning-the black bar safety net
This vulnerability disregard gpc escape, over 80sec injected into the defense. Complement, don't worry about the backend could not be found. This is just a demo, can modify any database, also afraid to not get the SHELL for? The cause is the global variable$GLOBALS can be freely modified, just...
CVE-2013-4920
The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a denial of service application crash via a crafted packet...
FreeBSD : phpMyAdmin -- Global variable scope injection (1b93f6fe-e1c1-11e2-948d-6805ca0b3d42)
The phpMyAdmin development team reports : The import.php script was vulnerable to GLOBALS variable injection. Therefore, an attacker could manipulate any configuration parameter. This vulnerability can be triggered only by someone who logged in to phpMyAdmin, as the usual token protection prevent...
Dedecms v57 sp1 plus/download.php SQL注入漏洞
起因是全局变量$GLOBALS可以被任意修改，随便看了下，漏洞一堆，我只找了一处。 codeinclude/dedesql.class.php ifisset$GLOBALS'arrs1' $v1 = $v2 = ''; for$i=0;isset$arrs1$i;$i++ $v1 .= chr$arrs1$i; for$i=0;isset$arrs2$i;$i++ $v2 .= chr$arrs2$i; //解码ascii $GLOBALS$v1 .= $v2; //注意这里不是覆盖，是+ function SetQuery$sql $prefix="@"; $sql =...
PHPMyWind v4. 5. 2 global variable overwrite 0day-vulnerability warning-the black bar safety net
Code: define‘PHPMYWINDINC’, pregreplace“//\\\\1,/”, ‘/’, dirnameFILE; define‘PHPMYWINDROOT’, pregreplace“//\\\\1,/”, ‘/’, substrPHPMYWINDINC, 0, -8; define‘PHPMYWINDDATA’, PHPMYWINDROOT.’/ data’; define‘PHPMYWINDUPLOAD’, PHPMYWINDROOT.’/ uploads’; define‘PHPMYWINDBACKUP’, PHPMYWINDDATA.’/...
Code audit: DedeCMS several latest bug analysis-bug warning-the black bar safety net
Preface:the original is a contributor to the hacking of Defense want to change a few pieces of pocket money,results 3 on the cast of the manuscript,the editor replied that the proposed 4 period 4 late advice that,that”two days will be published”,the results of today's 5 on 2 numbers are not...
PHP 5.x < 5.2.2 Multiple vulnerabilities
According to its banner, the version of PHP 5.x installed on the remote host is older than 5.2.2. It is, therefore, affected by multiple vulnerabilities: - A heap-based buffer overflow vulnerability was found in PHP's gd extension. A script that could be forced to process WBMP images from an...
DEDECMS global variable overwrite vulnerability science-vulnerability warning-the black bar safety net
DEDECMS global variable overwrite vulnerability was first wolves security team 0 9 published in the official soften up until now didn't repair the vulnerability, and now covers substantially DEDECMS full version. Personal guess is not the official deliberately left the back door. The following...
DEDECMS full version gotopage variable XSS ROOTKITS, 0DAY-vulnerability warning-the black bar safety net
Affected versions: DEDECMS full version The vulnerability described in: DEDECMS background landing template gotopage variable is not tested incoming data, leading toXSSvulnerabilities. \dede\templets\login.htm 6 5 the left and right input type="hidden" name="gotopage" value="? php if!...
RarCrack 0.2 - 'Filename init() .bss' (PoC)
The software can be downloaded here: http://rarcrack.sourceforge.net/ Author: stoke Date: 2010-09-20 Download: http://rarcrack.sourceforge.net/ Tested on: Backtrack 4 Site: http://devilcode.it | http://hack2web.altervista.org Special greetz to: nex, for reassure me when i sayed "WHY EIP IT'S NOT...
Discuz! 7.x/6.x论坛绕过全局变量防御漏洞
Discuz!是一款华人地区非常流行的Web论坛程序。 由于php5.3.x版本php.ini的设置中requestorder默认值为GP，导致Discuz! 6.x/7.x中可以绕过全局变量防御。 在include/global.func.php代码中： function daddslashes$string, $force = 0 !defined'MAGICQUOTESGPC' && define'MAGICQUOTESGPC', getmagicquotesgpc; if!MAGICQUOTESGPC || $force ifisarray$string foreach$stri...
Discuz! 6. x/7. x a global variable Defense bypass vulnerability-vulnerability warning-the black bar safety net
Due to php5. 3. x version php. ini settings requestorder the default value for the GP, resulting in Discuz! 6. x/7. x a global variable Defense bypass vulnerability include/global. func. php code: function daddslashes$string, $force = 0 ! defined'MAGICQUOTESGPC' && define'MAGICQUOTESGPC',...
Discuz! 6.x/7.x 全局变量防御绕过漏洞
No description provided by source...
phpMyAdmin 2.7.0 全局变量覆盖导致文件包含漏洞
No description provided by source...
Wordpress Plugin WP-Syntax <= 0.9.1 Remote Command Execution
No description provided by source. ====================================================================== Wordpress plugin WP-Syntax = 0.9.1 Remote Code Execution ====================================================================== This vulnerability was originally discovered by Raz0r on...
WordPress WP-Syntax 0.9.1 Command Execution
====================================================================== Wordpress plugin WP-Syntax $functions if isnull$functions continue; foreach$functions as $function $string = calluserfuncarray$function, array$string; return $string; ... Global variable testfilter is not defined, so...
Mandrake Linux Security Advisory : php (MDKSA-2007:090)
A heap-based buffer overflow vulnerability was found in PHP's gd extension. A script that could be forced to process WBMP images from an untrusted source could result in arbitrary code execution CVE-2007-1001. A DoS flaw was found in how PHP processed a deeply nested array. A remote attacker coul...
Coppermine Photo Gallery 1.4.19 Remote PHP File Upload Vulnerability
No description provided by source. Written By Michael Brooks Special thanks to str0ke! Coppermine Photo gallery - Remote PHP File Upload Affects: v1.4.19 Homepage: http://coppermine-gallery.net/ 5,239,057 downloads from sf.net! For this attack we need registerglobals=on . The problem is that the...
Coppermine Photo Gallery 1.4.19 - Remote File Upload
Coppermine Photo Gallery 1.4.19 - Remote File Upload Written By Michael Brooks Special thanks to str0ke! Coppermine Photo gallery - Remote PHP File Upload Affects: v1.4.19 Homepage: http://coppermine-gallery.net/ 5,239,057 downloads from sf.net! For this attack we need registerglobals=on . The...