4796 matches found
Docebo <= 3.5.0.3 (lib.regset.php) Command Execution Exploit
No description provided by source. ? / ------------------------------------------------------------------- Docebo = 3.5.0.3 lib.regset.php Remote Command Execution Exploit ------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.......
Docebo <= 3.5.0.3 (lib.regset.php) Command Execution Exploit
Exploit for unknown platform in category web applications ============================================================ Docebo getListTable." WHERE browsercode LIKE '%".$browserlanguage."%'"; executeQuery$qtxt; 801. 802. if $q && mysqlnumrows$q 0 803. $row=mysqlfe...
Docebo 3.5.0.3 - lib.regset.php Command Execution
Docebo 3.5.0.3 - lib.regset.php Command Execution getListTable." WHERE browsercode LIKE '%".$browserlanguage."%'"; executeQuery$qtxt; 801. 802. if $q && mysqlnumrows$q 0 803. $row=mysqlfetcharray$q; 804. $res=$row"regionid"; 805. an attacker cuold be inject SQL code through http accept-language...
Docebo 3.5.0.3 - 'lib.regset.php' Command Execution
getListTable." WHERE browsercode LIKE '%".$browserlanguage."%'"; executeQuery$qtxt; 801. 802. if $q && mysqlnumrows$q 0 803. $row=mysqlfetcharray$q; 804. $res=$row"regionid"; 805. an attacker cuold be inject SQL code through http accept-language header in the query at line 799, but explode functi...
CVE-2007-6660
2z project 0.9.6.1 allows remote attackers to obtain sensitive information via 1 a request to index.php with an invalid template or 2 a request to the default URI with certain year and month parameters, which reveals the path in various error messages...
vuln-summary.txt
Dear bugtraq, Below is a digest of vulnerabilities published by http://securityvulns.com/ and believed to be previously unpublished in English. All vulnerabilities were reported by MustLive http://websecurity.com.ua/. 1. AwesomeTemplateEngine Crossite scripting Multiple crossite scripting require...
Arbitrary file edit, Local file include, Directory traversal and Full path disclosure in WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Arbitrary file edit, Local file include, Directory traversal и Full path disclosure уязвимостях в WordPress. Дыры в файле templates.php в параметрах file и page и файлах edit-pages.php, categories.php, edit-comments.php, moderation.php, post.php и...
Local file include, Directory traversal and Full path disclosure in WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Local file include, Directory traversal и Full path disclosure уязвимостях в WordPress. Дыры в файлах index.php, link-manager.php, link-add.php, link-categories.php, link-import.php, theme-editor.php, plugins.php, plugin-editor.php, profile.php,...
New Local file include, Directory traversal and Full path disclosure in WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденной мною новых Local file include, Directory traversal и Full path disclosure уязвимостях в WordPress. Дыры в файлах edit.php и admin.php в параметре page Full path disclosure: http://site/wp-admin/edit.php?page= http://site/wp-admin/admin.php?page= Данные...
openbiblio-multi.txt
Security Advisory - - OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities - ---------------------------------------------------- Product: OpenBiblio Version: Version 0.5.2 Prerelease 4 and prior is affected Url: http://obiblio.sourceforge.net/ Affected by: Full path disclosure, local file...
2zproject-multi.txt
Digital Security Research Group DSecRG Advisory Name: 2z project Systems Affected: 2z project 0.9.6.1 Vendor URL: http://2z-project.ru Authors: Alexandr Polyakov, Stas Svistunovich Digital Security Reasearch Group DSecRG research at dsec dot ru Reported: 27.12.2007 Vendor response: 27.12.2007 Dat...
Local file include, Directory traversal and Full path disclosure in WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Local file include, Directory traversal и Full path disclosure уязвимостях в WordPress. Дыры в файлах admin.php параметр import и themes.php параметр page. Full path disclosure: http://site/wp-admin/admin.php?import=....wp-config...
2z-project 0.9.6.1 Multiple Security Vulnerabilities
Digital Security Research Group DSecRG Advisory Name: 2z project Systems Affected: 2z project 0.9.6.1 Vendor URL: http://2z-project.ru Authors: Alexandr Polyakov, Stas Svistunovich Digital Security Reasearch Group DSecRG research at dsec dot ru Reported: 27.12.2007 Vendor response: 27.12.2007 Dat...
[Full-disclosure] OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities
Security Advisory - - OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities - ---------------------------------------------------- Product: OpenBiblio Version: Version 0.5.2 Prerelease 4 and prior is affected Url: http://obiblio.sourceforge.net/ Affected by: Full path disclosure, local file...
CVE-2007-6502
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via 1 the AdminName and AdminLevel parameters to fp2000/NEWSRVR.asp, which discloses usernames; and 2 certain XML HTTP requests to hosting/css.asp using Microsoft.XMLHTTP or...
Information disclosure vulnerabilities in WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information disclosure уязвимостях в WordPress. Это SQL DB Structure Extraction и Full path disclosure уязвимости. SQL DB Structure Extraction: http://site/?feed=rss2&p=1 Full path disclosure: http://site/?feed=rss2&p=1 Где p - это id несуществующ...
Multiple vulnerabilities in BadBlue 2.72b
Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Windows Bugs: A PassThru buffer-overflow B upload directory traversal C path disclosure Exploitation: remote Date: 10 Dec 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction...
BadBlue <= 2.72b Multiple Remote Vulnerabilities
No description provided by source. Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Windows Bugs: A PassThru buffer-overflow B upload directory traversal C path disclosure Exploitation: remote Date: 10 Dec 2007 Author: Luigi Auriemma e-mail:...
BadBlue <= 2.72b Multiple Remote Vulnerabilities
Exploit for unknown platform in category remote exploits ================================================ BadBlue = 2.72b Multiple Remote Vulnerabilities ================================================ Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Window...
BadBlue 2.72b - Multiple Vulnerabilities
BadBlue 2.72b - Multiple Vulnerabilities Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Windows Bugs: A PassThru buffer-overflow B upload directory traversal C path disclosure Exploitation: remote Date: 10 Dec 2007 Author: Luigi Auriemma e-mail:...