CVE-2012-4265: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Proman Xpress 5.0.1 - Multiple Vulnerabilities

Proman Xpress 5.0.1 - Multiple Vulnerabilities Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 512 Common Vulnerability Scoring System:...

Proman Xpress 5.0.1 SQL Injection / XSS

Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 512 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Proman...

Proman Xpress 5.0.1 - Multiple Vulnerabilities

Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 512 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Proman...

Proman Xpress v5.0.1 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Introduction: ============= Proman Xpress v5.0.1 is a super project management script coded in PHP & MySQL. It s highly customizable and is used across industries. No Encryption...

Proman Xpress v5.0.1 - Multiple Web Vulnerabilities

Document Title: =============== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=513 Release Date: ============= 2012-05-08 Vulnerability Laboratory ID VL-ID: ==================================== 512...

Proman Xpress v5.0.1 - Multiple Web Vulnerabilities

Document Title: =============== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=513 Release Date: ============= 2012-05-08 Vulnerability Laboratory ID VL-ID: ==================================== 512...

CVE-2010-2138

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the SESSIONuserLang parameter to 1 elisttasks.php, 2 managepmanagers.php, 3 manageusers.php, 4 helpfunc.php, 5...

CVE-2010-2137

PHP remote file inclusion vulnerability in center.php in ProMan 0.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in center.php in ProMan 0.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Directory traversal

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the SESSIONuserLang parameter to 1 elisttasks.php, 2 managepmanagers.php, 3 manageusers.php, 4 helpfunc.php, 5...

CVE-2010-2138

CVE-2010-2138 affects ProMan 0.1.1 and earlier. The vulnerability is a directory traversal/remote local-file inclusion flaw in several PHP entry points (elisttasks.php, managepmanagers.php, manageusers.php, helpfunc.php, managegroups.php, manageprocess.php, manageusersgroups.php) where _SESSION[u...

CVE-2010-2137

PHP remote file inclusion vulnerability in center.php in ProMan 0.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2010-2138

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the SESSIONuserLang parameter to 1 elisttasks.php, 2 managepmanagers.php, 3 manageusers.php, 4 helpfunc.php, 5...

CVE-2010-2137

CVE-2010-2137 describes a PHP remote file inclusion in ProMan 0.1.1 and earlier, where an attacker can cause arbitrary PHP code execution by supplying a URL in the page parameter to _center.php. The vulnerability arises from improper handling of the page parameter, enabling remote code inclusion....

CVE-2010-2137: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in center.php in ProMan 0.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2010-2138: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in ProMan 0.1.1 and earlier allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the SESSIONuserLang parameter to 1 elisttasks.php, 2 managepmanagers.php, 3 manageusers.php, 4 helpfunc.php, 5...

ProMan 0.1.1 Local File Inclusion / Remote File Inclusion

ProMan Download: http://sourceforge.net/projects/pman/files/ RFI Code LFI Code includeonce'lang/'.$SESSION'userLang'.'/elisttasks.php'; if !defined'PROMAN' pexit $l'no hack'; PoC RFI: phpRAINCHECKpath/center.php?page=Shell PoC LFI: phpRAINCHECKpath/elisttasks.php?SESSIONuserLang=LFI%00...

ProMan <= 0.1.1 Multiple File Include Vulnerability

Exploit for unknown platform in category web applications =================================================== ProMan LFI Code includeonce'lang/'.$SESSION'userLang'.'/elisttasks.php'; if !defined'PROMAN' pexit $l'no hack'; PoC RFI: phpRAINCHECKpath/center.php?page=Shell PoC LFI:...

ProMan 0.1.1 - Multiple File Inclusions

ProMan Download: http://sourceforge.net/projects/pman/files/ RFI Code LFI Code includeonce'lang/'.$SESSION'userLang'.'/elisttasks.php'; if !defined'PROMAN' pexit $l'no hack'; PoC RFI: phpRAINCHECKpath/center.php?page=Shell PoC LFI: phpRAINCHECKpath/elisttasks.php?SESSIONuserLang=LFI%00...