129 matches found
Asterisk PBX SDP Header Overflow Vulnerability
The remote Asterisk PBX SIP server is affected by an overflow vulnerability. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SerWeb 0.9.4 (load_lang.php) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...
SerWeb 0.9.4 (load_lang.php) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ========================================================== SerWeb 0.9.4 loadlang.php Remote File Inclusion Exploit ========================================================== !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software,...
serweb094-rfi.txt
!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...
SerWeb 0.9.4 - load_lang.php Remote File Inclusion
SerWeb 0.9.4 - loadlang.php Remote File Inclusion !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...
SerWeb 0.9.4 - 'load_lang.php' Remote File Inclusion
!/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...
OpenSER OSP模块Validateospheader函数缓冲区溢出漏洞
OpenSER是一款开放源码的SIP服务器。 OpenSER的开放结算协议（OSP）模块中Validateospheader函数在处理特制报文时存在缓冲区溢出，远程攻击者可能利用此漏洞在服务器上执行任意指令。 漏洞相关的代码如下： int validateospheader struct sipmsg msg, char ignore1, char ignore2 如果攻击者向服务器发送了恶意报文的话就可能触发这个漏洞，导致远程执行任意指令。 OpenSER OpenSER = 1.1.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
