370 matches found
pivot-disclosure.txt
?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind' -pivotlog.net vulnerability: search.php - lines 98-109: ... ...
Pivot t参数目录遍历漏洞
BUGTRAQ ID: 30012 Pivot是一款基于WEB的帮助用户维护动态站点的工具。 Pivot的search.php文件没有正确过滤对t参数输入的便返回用于显示文件： ... // Set the template for the tags page if !isset$PivotVars't' || empty$PivotVars't' if isset$Weblogs$Currentweblog'extratemplate' && $Weblogs$Currentweblog'extratemplate'!="" $template =...
Pivot 1.40.5 - Dreamwind load_template() Credentials Disclosure
Pivot 1.40.5 - Dreamwind loadtemplate Credentials Disclosure ?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind'...
Pivot 1.40.5 Dreamwind load_template() Credentials Disclosure Exploit
Exploit for unknown platform in category web applications ===================================================================== Pivot 1.40.5 Dreamwind loadtemplate Credentials Disclosure Exploit ===================================================================== ?php / Pivot 1.40.5 'Dreamwind'...
Pivot 1.40.5 - Dreamwind 'load_template()' Credentials Disclosure
?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind' -pivotlog.net vulnerability: search.php - lines 98-109: ... ...
CVE-2006-3531
includes/editor/insertimage.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified 1 pass and 2 session parameters, and 3 pass and 4 userlevel indices of the a PivotVars o...
CVE-2006-3533
Multiple cross-site scripting XSS vulnerabilities in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 fg, 2 line1, 3 line2, 4 bg, 5 c1, 6 c2, 7 c3, and 8 c4 parameters in a includes/blogroll.php; 9 name and 10...
CVE-2006-3532
PHP file inclusion vulnerability in includes/editnew.php in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Pathsextensionspath parameter...
CVE-2006-3533
Multiple cross-site scripting XSS vulnerabilities in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 fg, 2 line1, 3 line2, 4 bg, 5 c1, 6 c2, 7 c3, and 8 c4 parameters in a includes/blogroll.php; 9 name and 10...
CVE-2006-3532
Pivot 1.30 RC2 and earlier are affected by a PHP file inclusion vulnerability in includes/edit_new.php when register_globals is enabled. An attacker can supply a FTP URL or full file path in Paths[extensions_path] to execute arbitrary PHP code remotely. The issue enables partial impact to confide...
CVE-2006-3531
Pivot 1.30 RC2 and earlier are affected by CVE-2006-3531 due to authentication credentials being constructed from request parameters in includes/editor/insert_image.php. This enables remote attackers to escalate privileges and upload arbitrary files by modifying (1) pass, (2) session, (3) pass an...
CVE-2006-3533
Pivot 1.30 RC2 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. When register_globals is enabled, attackers can inject arbitrary web script or HTML via the parameters fg, line1, line2, bg, c1, c2, c3, c4 in includes/blogroll.php; name and js_name in includes/editor...
CVE-2006-3531
includes/editor/insertimage.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified 1 pass and 2 session parameters, and 3 pass and 4 userlevel indices of the a PivotVars o...
CVE-2006-3533: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 fg, 2 line1, 3 line2, 4 bg, 5 c1, 6 c2, 7 c3, and 8 c4 parameters in a includes/blogroll.php; 9 name and 10...
CVE-2006-3531: Undefined Security Weakness
includes/editor/insertimage.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified 1 pass and 2 session parameters, and 3 pass and 4 userlevel indices of the a PivotVars o...
CVE-2006-3532: Undefined Security Weakness
PHP file inclusion vulnerability in includes/editnew.php in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Pathsextensionspath parameter...
pivot130rc2.php.txt
!/usr/bin/php -q -d shortopentag=on ? echo "Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dorks: "Powered byPivot"\n"; echo "version specific: "Powered byPivot - 1.30 RC2"...
Pivot <= 1.30 RC2 Privileges Escalation/Remote Code Execution Exploit
Exploit for unknown platform in category web applications ===================================================================== Pivot = 1.30 RC2 Privileges Escalation/Remote Code Execution Exploit ===================================================================== !/usr/bin/php -q -d...
Pivot <= 1.30 RC2 Privileges Escalation/Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dorks: "Powered byPivot"\n"; echo "version...
Pivot 1.30 RC2 - Privilege Escalation / Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ? echo "Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dorks: "Powered byPivot"\n"; echo "version specific: "Powered byPivot - 1.30 RC2"...