Prozilla Topsites 1.0 - Arbitrary Edit/Add Users

--==+================================================================================+==-- --==+ Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7...

h2desk helpdesk path disclosure vulnerability

Heathco's h2desk helpdesk ticking system provides a ticketing solution for small and large organizations alike. Blah blah. On to the exploit. h2desk's session handling is custom and doesnt use the standard phpsession id handling. As a result, if you add a tic ' or any other invalid character to t...

PYSEC-2008-3

Directory traversal vulnerability in the getfilepath function in 1 lib/sessions.py in CherryPy 3.0.x up to 3.0.2, 2 filter/sessionfilter.py in CherryPy 2.1, and 3 filter/sessionfilter.py in CherryPy 2.x allows remote attackers to create or delete arbitrary files, and possibly read and write...

php security update

CentOS Errata and Security Advisory CESA-2007:0888-01 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an embedded-HTML scripting...

DSA-1282-1 php4

Bulletin has no description...

CVE-2003-1312

siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION parameter in a URL, which might allow remote attackers to obtain the ID by sniffing, reading Referer logs, or other methods...

php security update

CentOS Errata and Security Advisory CESA-2006:0682-01 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...

CentOS 3 / 4 : php (CESA-2006:0669)

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

Moderate: Red Hat Security Advisory: php security update

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server....

SQL-Ledger serious security vulnerability and workaround

Hi; This post is to inform everyone that there is a serious security hole that has been discovered in SQL-Ledger involving session handling. The flaw allows anyone with network access to the server to access the application as any logged in user using trivial mechanisms. I have previously brought...

IRSR <= 0.2 (_sysSessionPath) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== IRSR pageheaderdefault.inc.php line 28-36: code // // Perform the session handling preprocessing. // requireonce $sysSessionPath; // Include the session handling functions...

IRSR 0.2 - &#039;_sysSessionPath&#039; Remote File Inclusion

/ + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - IRSR - Invisionix Roaming System Remote pageheaderdefault.inc.php line 28-36: code // // Perform the session handling preprocessing. // requireonce $sysSessionPath; // Include the session handling functions...

CVE-2006-3016

CVE-2006-3016 is a PHP vulnerability in the session handling code (session.c) that could allow a remote attacker to trigger a cross-site scripting or HTTP response splitting attack by supplying a crafted session identifier. The issue is associated with using non-alphanumeric session names and is ...

Directory traversal

Directory traversal vulnerability in the session handling class GallerySession.class in Gallery 2 up to 2.0.2 allows remote attackers to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is sanitized...

CVE-2006-1128

Directory traversal vulnerability in the session handling class GallerySession.class in Gallery 2 up to 2.0.2 allows remote attackers to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is sanitized...

CVE-2006-1128

CVE-2006-1128 is a directory traversal vulnerability in Gallery 2 (up to 2.0.2) where the session value from a cookie is used to build file paths before sanitization, allowing remote attackers to access and delete files. Connected sources confirm the affected component is GallerySession.class and...

Geeklog lib-sessions.php Session Cookie Handling Authentication Bypass

The version of Geeklog installed on the remote contains a flaw in its session-handling library that can be exploited by an attacker to bypass authentication and gain access as any user, including the admin. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Design/Logic Flaw

Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors...

CVE-2006-1069

Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors...

CVE-2006-1069

CVE-2006-1069 affects Geeklog versions with a flaw in the session-handling library (lib-sessions.php) that can be exploited to bypass authentication and gain access as any user, including admin. Affected: Geeklog 1.4.x before 1.4.0sr2; 1.3.11 before 1.3.11sr5; 1.3.9 before 1.3.9sr5 (and possibly ...