Jax Calendar 1.34 - Remote Admin Access

Jax Calendar 1.34 - Remote Admin Access Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34...

Jevonweb Guestbook Administrative Access

Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook" "http://www.jevonweb.f2s.com/"...

Jax Calendar 1.34 Remote Admin Access Exploit

No description provided by source. Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote...

Simple PHP Guestbook 1.0 Administrative Access

Vendor: http://www.simplephpguestbook.com/ Version: 1.0 Tested on: Windows and Linux -------------------------------------- Simple PHP Guestbook Remote Admin Access Exploit Created by Sora + contact: vhr95zw at hotmail.com Description: Simple PHP Guestbook suffers an remote access in the guestboo...

Jevonweb Guestbook - Remote Admin Access

Jevonweb Guestbook - Remote Admin Access Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook"...

Simple PHP Guestbook - Remote Admin Access

Simple PHP Guestbook - Remote Admin Access Vendor: http://www.simplephpguestbook.com/ Version: 1.0 Tested on: Windows and Linux -------------------------------------- Simple PHP Guestbook Remote Admin Access Exploit Created by Sora + contact: vhr95zw at hotmail.com Description: Simple PHP Guestbo...

Jevonweb Guestbook Remote Admin Access Exploit

No description provided by source. Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook"...

Simple PHP Guestbook - Remote Admin Access

Vendor: http://www.simplephpguestbook.com/ Version: 1.0 Tested on: Windows and Linux -------------------------------------- Simple PHP Guestbook Remote Admin Access Exploit Created by Sora + contact: vhr95zw at hotmail.com Description: Simple PHP Guestbook suffers an remote access in the guestboo...

Simple PHP Guestbook Remote Admin Access Exploit

Exploit for unknown platform in category web applications ================================================ Simple PHP Guestbook Remote Admin Access Exploit ================================================ Vendor: http://www.simplephpguestbook.com/ Version: 1.0 Tested on: Windows and Linux...

PHP 5.2.4 htaccess 文件导致safe_mode和open_basedir权限绕过

No description provided by source...

XAMPP 1.7.2 - Change Administrative Password

XAMPP 1.7.2 - Change Administrative Password Title: XAMPP 1.7.2 Change Administrative Password Date: 11/12/2009 Author: bi0 Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 1.7.2 Tested on: Windows XP / Windows Vista CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ ...

SugarCRM on Apache / Windows .htaccess Direct Request Arbitrary File Access

The version of SugarCRM running on the remote host has an information disclosure vulnerability. When Apache is running on Windows, .htaccess restrictions are case-sensitive, but filenames are not. A remote attacker can bypass .htaccess restrictions by using uppercase letters when requesting files...

CVE-2009-3558

The posixmkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass openbasedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file...

CVE-2009-3558

The posixmkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass openbasedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file...

CVE-2009-3558

The posixmkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass openbasedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file...

Reading Apache htaccess Files (win)

Reading Apache htaccess Files This script get the AuthUserFile configuration of an list of Apache htaccess files. OpenVAS Vulnerability Test $Id: GSHBReadApachehtaccessfiles.nasl 7293 2017-09-27 08:49:48Z cfischer $ Reading Apache htaccess Files win Authors: Thomas Rotter Copyright: Copyright c...

Reading Apache htaccess Files - Windows

Reading Apache htaccess Files. This script gets the AuthUserFile configuration of a list of Apache htaccess files. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Drupal任意文件上传和会话固定漏洞

Bugraq ID: 36431 Drupal是一款开放源码的内容管理平台。 Drupal存在多个安全漏洞，攻击者可以利用漏洞上传任意文件到服务器，劫持任意会话，未授权访问受影响应用程序。 文件API不正确处理使用部分扩展的文件上传，可导致上传的文件被Apache执行。.htaccess保存在Drupal文件目录中可防止上传被执行。只有当服务器配置忽略.htaccess文件中的指令时这些文件才会被执行。 当匿名用户使用单次登录链接用于确认EMAIL地址和重设忘记的密码时Drupal没有重生成会话ID，在部分条件下恶意用户可以修复和重用目标用户的会话ID。 Drupal Drupal 6....

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 6069)

Missing bounds checks of an error in the imageRotate function of the gd extension potentially allowed attackers to read portions of memory. CVE-2008-5498 The mbstring.funcoverload in .htaccess was applied to other virtual hosts on th same machine. CVE-2009-0754 %NASLMINLEVEL 70300 C Tenable Netwo...

PHPList远程文件包含漏洞

BUGTRAQ: 9046 PHPlist是一款由PHP编写的时事通讯应用程序。 PHPlist由于不充分过滤用户提交的请求，远程攻击者可以利用这个漏洞包含远程服务器上的恶意PHP文件，以WEB权限执行。 PHPlist 2.6.2 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 如果使用Apache，使用.htaccess文件限制"admin"目录访问： FilesMatch ".php|inc$" Order allow,deny deny from all /FilesMatch FilesMatch "index.php$" Order...