1062 matches found
phpmyprofilerRFI.txt
Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler <= 0.9.6 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================== phpMyProfiler = 0.9.6 Remote File Include Vulnerability ======================================================== phpMyProfiler Remote File Inclusion Vulnerability...
phpMyProfiler <= 0.9.6 Remote File Include Vulnerability
No description provided by source. Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler 0.9.6 - Remote File Inclusion
phpMyProfiler 0.9.6 - Remote File Inclusion Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler 0.9.6 - Remote File Inclusion
Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
CVE-2006-4944: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...
php security update
CentOS Errata and Security Advisory CESA-2006:0669 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability
------------------------------------------------------------------------ ------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------ ------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll....
CentOS 3 / 4 : php (CESA-2005:748)
Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR XML-RP...
CentOS 3 / 4 : php (CESA-2005:564)
Updated PHP packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR...
V-Webmail <= 1.6.4 (pear_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== V-Webmail Vulnerable File v-webmail/includes/pear//.php = requireonce $CONFIG'peardir' . '.php'; v-webmail/includes/mailaccess/pop3.php = requireonce$CONFIG'peardir'...
FreeBSD : pear-XML_RPC -- remote PHP code injection vulnerability (e65ad1bf-0d8b-11da-90d0-00304823c0d3)
A Hardened-PHP Project Security Advisory reports : When the library parses XMLRPC requests/responses, it constructs a string of PHP code, that is later evaluated. This means any failure to properly handle the construction of this string can result in arbitrary execution of PHP code. This new...
FreeBSD : pear-PEAR -- PEAR installer arbitrary code execution vulnerability (44e5f5bd-4d76-11da-bf37-000fb586ba73)
Gregory Beaver reports : A standard feature of the PEAR installer implemented in all versions of PEAR can lead to the execution of arbitrary PHP code upon running the 'pear' command or loading the Web/Gtk frontend. To be vulnerable, a user must explicitly install a publicly released malicious...
GLSA-200603-13 : PEAR-Auth: Potential authentication bypass
The remote host is affected by the vulnerability described in GLSA-200603-13 PEAR-Auth: Potential authentication bypass Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact : A remote attacker could possibly exploit this vulnerabili...
PEAR-Auth: Potential authentication bypass
Background PEAR-Auth is a PEAR package that provides methods to create a PHP based authentication system. Description Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact A remote attacker could possibly exploit this vulnerability t...
CVE-2005-4731
CVE-2005-4731 affects PEAR HTML_QuickForm_Controller 1.0.4 where the Next action includes the session ID in the URL despite session.use_only_cookies being configured. This enables an external attacker to obtain the SID via the HTTP Referer field and possibly other vectors, exposing partial confid...
CVE-2005-4731
The Next action in PEAR HTMLQuickFormController 1.0.4 includes the SID in the URL even when session.useonlycookies is configured, which allows remote attackers to obtain the SID via an HTTP Referer field and possibly other vectors...
CVE-2005-4731: Undefined Security Weakness
The Next action in PEAR HTMLQuickFormController 1.0.4 includes the SID in the URL even when session.useonlycookies is configured, which allows remote attackers to obtain the SID via an HTTP Referer field and possibly other vectors...