250 matches found
Easy business v3. 0 code audit-vulnerability warning-the black bar safety net
A gay in a portal to work..site total person-days..so..let us Diamondback help to look at the dish below, do not spray to initiate a dedicated Just a cursory scan of a few eye..pit... ! Simply wood with a filter media OK.. news\install\index. php. bak this turned out also with a dede..although ba...
Fedora 16 : php-pear-CAS-1.3.0-2.fc16 (2012-4119)
Upstream changelog Changes in version 1.3.0 Bug Fixes : - the saml logout url should be parsed urlencoded 24 dlineate - fix a proxy mode bug introduced in a previous comitt 16 Adam Franco - Fix includepath order so that the phpCAS path takes precedence 13 Adam Franco - fix invalid characters in t...
DEDECMS global variable overwrite vulnerability science-vulnerability warning-the black bar safety net
DEDECMS global variable overwrite vulnerability was first wolves security team 0 9 published in the official soften up until now didn't repair the vulnerability, and now covers substantially DEDECMS full version. Personal guess is not the official deliberately left the back door. The following...
phpMyAdmin '$_SESSION'数列未授权访问漏洞
Bugtraq ID: 48480 phpMyAdmin是一款基于PHP的MySQL管理程序。 phpMyAdmin存在多个安全漏洞： 1，超级全局$SESSION数列中的任意变量可覆盖或使用任意值创建。 2，phpMyAdmin中的一个错误配置允许$SESSION数列中的内容写入到.php-file中，组合1漏洞可能执行任意代码。 3，$SESSION数列中的内容post验证用于函数输入可执行PHP代码。 phpMyAdmin 3.4.0 厂商解决方案 目前没有详细解决方案提供： http://www.phpmyadmin.net/...
boblog arbitrary variable overwrite vulnerability(a)-vulnerability warning-the black bar safety net
by Ryatpuretot mail: puretot at gmail dot com team: http://www.80vul.com Vulnerability code is as follows: // go.php $qurl=$SERVER"REQUESTURI"; @list$relativePath, $rawURL=@explode'/go.php/', $qurl; $rewritedURL=$rawURL; // from$SERVER"REQUESTURI",can be arbitrarily submitted:...
[SECURITY] [DSA 2120-1] New postgresql-8.3 packages fix privilege escalation
------------------------------------------------------------------------ Debian Security Advisory DSA-2120-1 [email protected] http://www.debian.org/security/ Florian Weimer October 12, 2010 http://www.debian.org/security/faq -...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSRootPath parameter to 1 Framework/EmailTemplates.class.php, 2 Customers/PDPEmailReplaceConstants.class.php, and 3...
PHP application of Common Vulnerability analysis-vulnerability warning-the black bar safety net
Transfer from: WhyTT Not impregnable, as PHP is widely used, some hackers also at no time not looking for a PHP trouble, by the PHP application vulnerability to attack is one of them. In the section, we will from a global variable, remote file, file upload, library files, Session files, data type...
Ubuntu: Security Advisory (USN-720-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandriva Update for php MDKSA-2007:089 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:089 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Mandriva Update for php MDKSA-2007:048 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:048 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Mandriva Update for php MDKSA-2007:090 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDKSA-2007:090 php Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Database settings
This plugin just sets global variables SID, SERVICENAME, etc., and does not perform any security checks. TRUSTED...
XAMPP 1.6.8 - Cross-Site Request Forgery (Change Administrative Password)
XAMPP 1.6.8 - Cross-Site Request Forgery Change Administrative Password XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage:...
Port scanners settings
This plugin configures miscellaneous global variables for Nessus port scanners. It does not perform any security check. C Tenable Network Security, Inc. @PREFERENCES@ include"compat.inc"; ifdescription scriptid33812; scriptversion "$Revision: 1.7 $"; scriptcvsdate"$Date: 2011/03/21 18:19:28 $";...
Gentoo Security Advisory GLSA 200402-01 (PHP)
The remote host is missing updates announced in advisory GLSA 200402-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200402-01 (PHP)
The remote host is missing updates announced in advisory GLSA 200402-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Debian: Security Advisory (DSA-1264-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Code injection
The sanitizeglobals function in CodeIgniter 1.5.3 before 20070628 allows remote attackers to unset arbitrary global variables with unspecified impact, as demonstrated by a SERVER cookie...
