Remote file inclusion

PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2007-2493

CVE-2007-2493 affects the mxBB FAQ & RULES 2.0.0 and earlier module. The vulnerability is a PHP remote file inclusion in faq.php, exploitable via a malicious URL supplied to the module_root_path parameter, which allows an attacker to execute arbitrary PHP code on the server. The NVD entry lists t...

mxBB Module FAQ & RULES 2.0.0 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications =========================================================== mxBB Module FAQ & RULES 2.0.0 Remote File Inclusion Exploit =========================================================== !/usr/bin/php -q -d shortopentag=on cmd: a shell command ls...

CVE-2007-2119

Cross-site scripting XSS vulnerability in boundaryrules.jsp in the Administration Front End for Oracle Enterprise Ultra Search, as used in Database Server 9.2.0.8, 10.1.0.5, and 10.2.0.2, and in Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to inject arbitrary HTM...

Cross site scripting

Cross-site scripting XSS vulnerability in boundaryrules.jsp in the Administration Front End for Oracle Enterprise Ultra Search, as used in Database Server 9.2.0.8, 10.1.0.5, and 10.2.0.2, and in Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to inject arbitrary HTM...

CVE-2007-2109

Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and remote authenticated attack vectors related to 1 Rules Manager and Expression Filter components DB02 and 2 Oracle Streams DB06. Note: as of 20070424, Oracle has not disputed reliable claims that DB02 is for a...

CVE-2007-2109

Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and remote authenticated attack vectors related to 1 Rules Manager and Expression Filter components DB02 and 2 Oracle Streams DB06. Note: as of 20070424, Oracle has not disputed reliable claims that DB02 is for a...

CVE-2007-2119

Cross-site scripting XSS vulnerability in boundaryrules.jsp in the Administration Front End for Oracle Enterprise Ultra Search, as used in Database Server 9.2.0.8, 10.1.0.5, and 10.2.0.2, and in Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to inject arbitrary HTM...

PT-2007-1167 · Sun · Sun One Directory Server +1

Name of the Vulnerable Software and Affected Versions: Sun Java System Directory Server versions 5.2 Patch4 and earlier ONE Directory Server versions 5.1 and 5.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending malformed queries to the...

Firewall security risks-vulnerability warning-the black bar safety net

By KenshinB. C. T Published in the manual hacker 0 6. 6 Reproduced please indicate:http://www. loveshell. net Potatoes Amnesty let me out of here,we respect the lower! Thank you! Himself for the firewall always nothing good, in invasion, they're rather nasty stumbling block is. They not only put...

Apple Airport IPv6 weak default configuration

IPv6 tunneling support is enabled by default and no filtering rules are applied to tunelled traffic...

modsec-bypass.txt

modsecurity Now call it with a command like $ echo -e "&var=alert/xss/;" postdata $ curl http://localhost/test.php -...

Design/Logic Flaw

Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...

CVE-2007-1359

Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...

CVE-2007-1359

ModSecurity (mod_security)

CVE-2007-1359

Interpretation conflict in ModSecurity modsecurity 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-www-form-urlencoded POST data that contains an ASCIIZ 0x00 byte, which modsecurity treats as a terminator even though it is still processed as normal data by some...

mod_security <= 2.1.0 (ASCIIZ byte) POST Rules Bypass Vulnerability

Exploit for multiple platform in category remote exploits =================================================================== modsecurity = 2.1.0 ASCIIZ byte POST Rules Bypass Vulnerability =================================================================== modsecurity = 2.1.0 ASCIIZ byte POST...

mod_security 2.1.0 - ASCIIZ byte POST Rules Bypass

modsecurity Now call it with a command like $ echo -e "&var=alert/xss/;" postdata $ curl http://localhost/test.php --data-binary @postdata -A HarmlessUserAgent alert/xss/; The examp...

mod_security 2.1.0 - ASCIIZ byte POST Rules Bypass

modsecurity 2.1.0 - ASCIIZ byte POST Rules Bypass modsecurity Now call it with a command like $ echo -e "&var=alert/xss/;" postdata $ curl http://localhost/test.php --data-binary...

phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit

No description provided by source. !/usr/bin/perl phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: includeonce$phpbbrootpath...