EUVD-2007-6143

Malware in sbrugna...

EUVD-2007-6154

Malware in sbrugna...

EUVD-2011-3730

Malware in sbrugna...

PHPDevShell 3.2.0 Cross Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PHPDEVSHELL-XSS.txt Vendor =================== www.phpdevshell.org Product: ================== PHPDevShell V3.2.0 PHPDevShell is a RAD Framework aimed at developing administrative...

CVE-2011-3773

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

Information disclosure

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

PT-2011-4663

Name of the Vulnerable Software and Affected Versions PHPDevShell version 3.0.0-Beta-4b Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by requesting the gzip.php file, which reveals the installation path in a...

CVE-2011-3773

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

CVE-2011-3773: Exposure of Sensitive Information to an Unauthorized Actor

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

CVE-2007-6186

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6174

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information...

Information disclosure

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information...

Code injection

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6174

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information...

CVE-2007-6186

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6174: Undefined Security Weakness

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information...

CVE-2007-6186: Undefined Security Weakness

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6174

CVE-2007-6174 affects PHPDevShell prior to 0.7.0. The vuln allows remote authenticated users to escalate privileges by sending a crafted request to update a user profile, leading to complete confidentiality, integrity, and availability impact as per CVSS metrics (base score 8.5, HIGH). Root cause...

CVE-2007-6186

Technical details about CVE-2007-6186 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.