115 matches found
Podcast Generator 'core/admin/delete.php' Arbitrary File Deletion Vulnerability
Podcast Generator is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the webserver. Successful attacks may aid in launching further attacks. Podcast Generator 1.1 is vulnerable; prior versions may also be affected. OpenVAS Vulnerabili...
Podcast Generator Detection (HTTP)
HTTP based detection for Podcast Generator. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Podcast Generator <= 1.1 Arbitrary File Deletion Vulnerability
Podcast Generator is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the webserver. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Code injection
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action...
CVE-2009-1226
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter...
Code injection
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter...
CVE-2009-1230
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action...
CVE-2009-1230
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action...
CVE-2009-1226
CVE-2009-1226 affects Podcast Generator 1.1 and earlier. The issue is an improper restriction of access to admin functions in core/admin/delete.php, allowing remote attackers to delete arbitrary files via the file parameter. Base score 7.5 (HIGH) per NVD. No patch/mitigation details are provided ...
CVE-2009-1226
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter...
CVE-2009-1230
Podcast Generator pre-1.2 is vulnerable to Arbitrary File Deletion via core/admin/delete.php and related input handling flaws (e.g., persisting inputs like file/absoluteurl/theme_path with register_globals enabled). Exploitation could let an attacker delete arbitrary files on the webserver. Affec...
Podcast Generator <= 1.1 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " Podcast Generator = 1.1 Remote Code Execution Vendor: http://podcastgen.sourceforge.net Exploit Author: BlackHawk Author's Site: http://itablackhawk.altervista.org Credits goes to RGod for the code Thanks to Marija...
Podcast Generator 1.1 Code Execution
!/usr/bin/php -q -d shortopentag=on $file.$ext $Ldeleted"; --------------------------- no check for admin rights, so now we can delete whatever file we want, with any exstension.. so let's delete config.php and make a rfesh new installation with a password set by us! the RCE is triggered in...
Podcast Generator <= 1.1 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================== Podcast Generator $file.$ext $Ldeleted"; --------------------------- no check for admin rights, so now we can delete whatever file we want, with any exstension.. so let's delete...
Podcast Generator 1.1 - Remote Code Execution
!/usr/bin/php -q -d shortopentag=on $file.$ext $Ldeleted"; --------------------------- no check for admin rights, so now we can delete whatever file we want, with any exstension.. so let's delete config.php and make a rfesh new installation with a password set by us! the RCE is triggered in...
Cross site scripting
Cross-site scripting XSS vulnerability in setpermissions.php in Podcast Generator 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the scriptlang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1212
Cross-site scripting XSS vulnerability in setpermissions.php in Podcast Generator 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the scriptlang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1212
Cross-site scripting XSS vulnerability in setpermissions.php in Podcast Generator 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the scriptlang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1212
The CVE-2008-1212 entry describes a Cross‑Site Scripting (XSS) vulnerability in Podcast Generator 0.96.2, specifically in set_permissions.php where the scriptlang parameter can be exploited. The underlying issue is insufficient input sanitization, allowing remote attackers to inject arbitrary scr...
Podcast Generator 0.96.2 - 'set_permissions.php' Cross-Site Scripting Vulnerability
Podcast Generator 0.96.2 'setpermissions.php' Cross-Site Scripting Vulnerability. CVE-2008-1212. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28106/info Podcast Generator is prone to a cross-site scripting vulnerability because it fails to adequately sanitize...