20 matches found
EUVD-2006-7094
Malware in sbrugna...
EUVD-2006-6852
Malware in sbrugna...
MDPro <= 1.0.76 (Cookie: PNSVlang) Local File Include Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
Envolution <= 1.1.0 (PNSVlang) Remote Code Execution Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
CVE-2006-7112: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary files via the PNSVlang cookie, as demonstrated by uploading a GIF image using AddDownload or injecting PHP code into a log file, then accessing it...
CVE-2006-6869: Undefined Security Weakness
Directory traversal vulnerability in includes/search/searchmdforum.php in MAXdev MDForum 2.0.1 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PNSVlang cookie to error.php, as...
MDForum <= 2.0.1 (PNSVlang) Remote Code Execution Exploit
No description provided by source. ? //Kacper & str0ke Settings $exploitname = "MDForum = 2.0.1 PNSVlang Remote Code Execution Exploit"; $scriptname = "MDForum 2.0.1"; $scriptsite = "http://www.maxdev.pl/Contents,Download,View,8.phtml"; $dork = '"Powered by MDForum"'; // print ' :::::::::...
MDForum <= 2.0.1 (PNSVlang) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ========================================================= MDForum = 2.0.1 PNSVlang Remote Code Execution Exploit ========================================================= ? //Kacper & str0ke Settings $exploitname = "MDForum = 2.0.1 PNSVlan...
MDForum 2.0.1 - 'PNSVlang' Remote Code Execution
DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all D...
CVE-2006-6445: Undefined Security Weakness
Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PNSVlang PNSV lang parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then...
envolution.txt
? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++ +++:++ +++:++++: ++ +:+ ...
Envolution <= 1.1.0 (PNSVlang) Remote Code Execution Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
Envolution 1.1.0 - PNSVlang Remote Code Execution
Envolution 1.1.0 - PNSVlang Remote Code Execution DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM...
Envolution <= 1.1.0 (PNSVlang) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ Envolution = 1.1.0 PNSVlang Remote Code Execution Exploit ============================================================ ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+:...
PostNuke Error.PHP本地文件包含漏洞
PostNuke一款流行的内容管理程序。 PostNuke不正确处理用户提交的url数据，远程攻击者可以利用漏洞以web权限查看系统文件内容。 问题存在于error.php脚本中，由于对PNSVlang会话变量缺少过滤，可导致包含和以web权限查看本地文件，导致敏感信息泄露。 PostNuke PostNuke CMS 0.763 PostNuke PostNuke CMS 0.762 升级到PostNuke 0.764 版本： http://www.postnuke.com/...
CVE-2006-5733
Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PNSVlang PNSV lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then includ...
CVE-2006-5733: Undefined Security Weakness
Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PNSVlang PNSV lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then includ...
MDPro <= 1.0.76 (Cookie: PNSVlang) Local File Include Exploit
Exploit for unknown platform in category web applications ============================================================= MDPro = 1.0.76 Cookie: PNSVlang Local File Include Exploit ============================================================= ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :...
MDPro 1.0.76 - Cookie PNSVlang Local File Inclusion
MDPro 1.0.76 - Cookie PNSVlang Local File Inclusion DEVIL TEAM IRC: 72.20.18.6:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patrio...
MDPro 1.0.76 - 'Cookie PNSVlang' Local File Inclusion
DEVIL TEAM IRC: 72.20.18.6:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon TomZen, Gelo, Ramzes, DMX, Ci2u,...