4338 matches found
XOOPS 2.2.6. local include vulnerability-vulnerability warning-the black bar safety net
Author: Oldjun Casual encounter with this foreign CMS system: XOOPS 2.2.6, google the next, version old, and didn't find any known vulnerability, so the following source code yourself to see, still haven't found what you can use, but saw a couple of tasteless, so. XOOPS is a web application...
Mura CMS 5.1 - Root Path Disclosure
ONSEC-09-020 Mura CMS root folder disclosure Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Description: content...
Mura CMS 5.1 - Root Path Disclosure
Mura CMS 5.1 - Root Path Disclosure ONSEC-09-020 Mura CMS root folder disclosure Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir Vorontsov OnSec Russian Security Group...
RunCMS 2ma post.php SQL injection
Exploit for unknown platform in category web applications ================================= RunCMS 2ma post.php SQL injection ================================= query$sql redirectheader"index.php", 2, MDCANTGETFORUM; exit; ... 'forum' variable is taken from $POST array and inserted in a sql query...
Amiro.CMS 5.4.0.0 - Path Disclosure
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of notification Developer: 01.07.2009...
Amiro.CMS 5.4.0.0 - Path Disclosure
Amiro.CMS 5.4.0.0 - Path Disclosure ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of...
PBBoard <=2.0.2 Full Path Disclosure
No description provided by source. AdvisoryPBBoard =2.0.2 - Full Path Disclosure Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products:...
PBBoard <= 2.0.2 - Full Path Disclosure
Exploit for unknown platform in category web applications ====================================== PBBoard GET as $sqlget if eregi"select", $sqlget or eregi"union", $sqlget or eregi"%", $sqlget $this-error'?? ????? ± ??±???!'; ================ ================ 2. Full Path Disclosure...
PBBoard <=2.0.2 - Full Path Disclosure
No description provided by source. AdvisoryPBBoard =2.0.2 - Full Path Disclosure Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products:...
PBBoard 2.0.2 - Full Path Disclosure
PBBoard 2.0.2 - Full Path Disclosure AdvisoryPBBoard GET as $sqlget if eregi"select", $sqlget or eregi"union", $sqlget or eregi"%", $sqlget $this-error'?? ¨¹??? ± ?´±?¹?!'; ================ ================ 2. Full Path Disclosure ----------------------------------- allow attackers to gather the...
[Advisory]PBBoard <=2.0.2 Full Path Disclosure
AdvisoryPBBoard =2.0.2 - Full Path Disclosure Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products: ---------------------------- test on...
PBBoard 2.0.2 - Full Path Disclosure
AdvisoryPBBoard GET as $sqlget if eregi"select", $sqlget or eregi"union", $sqlget or eregi"%", $sqlget $this-error'?? ¨¹??? ± ?´±?¹?!'; ================ ================ 2. Full Path Disclosure ----------------------------------- allow attackers to gather the real path of the server side script...
[MajorSecurity Advisory #57]PHP <=5.3 - preg_match() full path disclosure
MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...
[MajorSecurity Advisory #59]PHP <=5.3 - mysqli_real_escape_string() full path disclosure
MajorSecurity Advisory 59PHP =5.3 - mysqlirealescapestring full path disclosure Details ======= Product: PHP =5.3 Security-Risk: low Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...
PHP <=5.3 - preg_match() full path disclosure
Exploit for unknown platform in category remote exploits ============================================= PHP =5.3 - pregmatch full path disclosure ============================================= Title: PHP =5.3 - pregmatch full path disclosure CVE-ID: OSVDB-ID: Author: David Vieira-Kurz Published:...
PHP <=5.3 - preg_match() full path disclosure
No description provided by source. MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered b...
PHP 5.3 - 'preg_match()' Full Path Disclosure
MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...
PHP 5.3 - preg_match() Full Path Disclosure
PHP 5.3 - pregmatch Full Path Disclosure MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============...
Vulnerabilities in FileDownload Snippet for MODx
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Directory Traversal и Full path disclosure уязвимостях в FileDownload Snippet для MODx. Directory Traversal: http://site/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=../index.php Данная уязвимость может использоваться для...
SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities
SEC Consult Security Advisory 20090917-0 ======================================================================= title: Multiple Vulnerabilities in RADactive I-Load products: RADactive I-Load vulnerable version: = I-Load 2008.2.4.0 fixed version: I-Load 2008.2.5.0 impact: critical homepage:...