Free Arcade Script 1.0 LFI Command Execution Exploit

Exploit for unknown platform in category web applications ==================================================== Free Arcade Script 1.0 LFI Command Execution Exploit ==================================================== !/usr/bin/perl...

Pyrophobia 2.1.3.1 LFI Command Execution Exploit

Exploit for unknown platform in category web applications ================================================ Pyrophobia 2.1.3.1 LFI Command Execution Exploit ================================================ !/usr/bin/perl...

Free Arcade Script 1.0 - Local File Inclusion Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Free Arcade Script 1.0 - Local File Inclusion Command Execution

Free Arcade Script 1.0 - Local File Inclusion Command Execution !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Free Arcade Script 1.0 Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Pyrophobia 2.1.3.1 Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Pyrophobia 2.1.3.1 - Local File Inclusion Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

PHPbbBook 1.3 (bbcode.php l) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================= PHPbbBook 1.3 bbcode.php l Local File Inclusion Exploit ========================================================= !/usr/bin/perl...

PHPbbBook 1.3 Local File Inclusion

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = PHPbbBook 1.3 Downl = http://phpbbbook.syssap.nl/downloads/PHPbbBook-1.3h.zip Remote Command Execution...

PHPbbBook 1.3 - bbcode.php?l Local File Inclusion

PHPbbBook 1.3 - bbcode.php?l Local File Inclusion !/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = PHPbbBook 1.3 Downl =...

PHPbbBook 1.3 - 'bbcode.php?l' Local File Inclusion

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = PHPbbBook 1.3 Downl = http://phpbbbook.syssap.nl/downloads/PHPbbBook-1.3h.zip Remote Command Execution...

util-linux: audit log injection via login

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

Ultimate PHP Board 2.2.1 Privilege Escalation

!/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + localhost". "\nPath + forum path /upb". "\nID + your user ID". "\nEmail + your/any email\n"; exit...

Ultimate PHP Board 2.2.1 - Privilege Escalation

Ultimate PHP Board 2.2.1 - Privilege Escalation !/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + localhost". "\nPath + forum path /upb". "\nID +...

DTSA-126-1 util-linux - log injection

Bulletin has no description...

Fedora 8 : util-linux-ng-2.13.1-2.fc8 (2008-3419)

Tue Apr 22 2008 Karel Zak 2.13.1-2 - fix audit log injection attack via login - Wed Jan 16 2008 Karel Zak 2.13.1-1 - upgrade to stable util-linux-ng 2.13.1 - fix 427874 - util-linux-ng gets 'excess command line argument' on update - Thu Jan 3 2008 Karel Zak 2.13-3.2 - fix 427207 -...

util-linux-ng登录远程日志注入漏洞

BUGTRAQ ID: 28983 CVECAN ID: CVE-2008-1926 util-linux-ng是增强版本的Util-linux软件包，包含有多种linux工具和应用。 util-linux-ng软件包的login.c在记录登录尝试时存在参数注入漏洞，远程攻击者可以在登录名称中添加addr=语句在审计日志中修改部分日志事件，从而隐藏其登录尝试等行为。 Karel Zak util-linux-ng 2.13.1.1 Karel Zak --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...