CVE-2008-1496

CVE-2008-1496 describes multiple SQL injection vulnerabilities in PEEL (likely 3.x and earlier), where remote attackers could execute arbitrary SQL commands via the (1) email parameter to membres.php and the (2) timestamp parameter to the details action in achat/historique_commandes.php and the f...

CVE-2008-1495

The vulnerability CVE-2008-1495 affects PEEL (likely 3.x and earlier) in the administrer/produits.php file, where an unrestricted file upload allows remote authenticated administrators to upload and execute arbitrary PHP files by altering the content type during an ajout action (demonstrated with...

CVE-2008-1496

Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to a membre.php, and the 2 timestamp parameter to b the details action in achat/historiquecommandes.php and c the facture action in...

CVE-2008-1495

Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by 1 image/gif and 2 application/pdf...

PEEL CMS Admin Hash Extraction and Remote Upload Exploit

No description provided by source. !/usr/bin/php ?php /---------------------------------------------------------------\ Exploit: PEEL CMS Admin Hash Extraction and Remote Upload Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL...

PEEL CMS Admin Hash Extraction and Remote Upload

!/usr/bin/php ?php /--------------------------------------------------------------- Exploit: PEEL CMS Admin Hash Extraction and Remote Upload Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL...

PEEL CMS 3.x - Admin Hash Extraction Arbitrary File Upload

PEEL CMS 3.x - Admin Hash Extraction Arbitrary File Upload !/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Speci...

PEEL CMS Admin Hash Extraction and Remote Upload Exploit

Exploit for unknown platform in category web applications ======================================================== PEEL CMS Admin Hash Extraction and Remote Upload Exploit ======================================================== !/usr/bin/php ^',...

PEEL CMS 3.x - Admin Hash Extraction / Arbitrary File Upload

!/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Special thanks to: ddx39...

peelcms-upload.txt

!/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Special thanks to: ddx39...

DEBIAN-CVE-2006-3121

The peelnetstring function in clnetstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service crash via the length parameter in a heartbeat message...

CVE-2005-3572

SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter...

CVE-2005-3572

SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter...

CVE-2002-2134

The CVE concerns PEEL 1.0b, where the script haut.php allows remote attackers to execute arbitrary PHP code by altering the dirroot parameter to point to a URL on a remote server that contains code in a lang.php file. This establishes a remote code execution path via manipulation of dirroot, enab...

CVE-2002-2134

haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in a lang.php file...

CVE-2005-3572

Summary: CVE-2005-3572 is a SQL injection in the Peel CMS, affecting index.php for Peel versions 2.6–2.7, where the rubid parameter can be used by remote attackers to execute arbitrary SQL commands. Related entries (e.g., CVE-2008-6892 and mirrors in CVE/CVELIST records) reference Peel 3.x (such ...

PEEL 2.x sql injection

PEEL 2.x sql injection Author: r0t hackers.by.lv Date: 14. nov 2005 software: PEEL 2.x vendor: http://peel.fr/ Tested on 2.6 and 2.7 version Vulnerability Description: contains a flaw that may allow a remote attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script...

PEEL (PHP)

Informations : °°°°°°°°°°°°°° Version : 1.0b Website : http://www.mapetite-entreprise.com Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° modeles/haut.php : ----------------------------------------------------------- ? $langfile = $dirroot."/lang/".$SESSION"lang"."/lang.php"; requi...

CVE-2002-2134

haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in a lang.php file...