373 matches found
PHPCMS 2008 - Remote Code Execution via Template Injection
PHPCMS 2008 suffers from an unauthenticated RCE via template injection in type.php, where attacker-supplied content is written into a PHP template cache file, which is then executable. id: CVE-2018-19127 info: name: PHPCMS 2008 - Remote Code Execution via Template Injection author: tomaquet18...
phpcms-2008-CVE-2018-19127
phpcms-2008-CVE-2018-19127 最近、phpcms 2008 のソースコードの /type.php に脆弱性を発見しました。攻撃者が「/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss」のような細工されたリクエストを送信すると、悪意のあるコンテンツ（この場合は「@unlinkFILE;assert$POST1;」）がキャッシュファイル（この場合は「/cachetemplate/rss.tpl.php」）に書き込まれます。 /type.php には以下のコードがあります： root@kitploit:...
EUVD-2006-3016
Malware in sbrugna...
EUVD-2020-14964
Malware in sbrugna...
EUVD-2008-0523
Malware in sbrugna...
EUVD-2011-0663
Malware in sbrugna...
EUVD-2011-0662
Malware in sbrugna...
EUVD-2013-5773
Malware in sbrugna...
EUVD-2005-1842
Malware in sbrugna...
EUVD-2020-14968
Malware in sbrugna...
EUVD-2004-1200
Malware in sbrugna...
EUVD-2021-23028
Malware in sbrugna...
EUVD-2019-2091
Malware in sbrugna...
EUVD-2018-6317
Malware in sbrugna...
EUVD-2004-1199
Malware in sbrugna...
EUVD-2020-14966
Malware in sbrugna...
EUVD-2020-14965
Malware in sbrugna...
EUVD-2018-6822
Malware in sbrugna...
