CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

907 matches found

Packet Storm•added 2008/02/28 12:00 a.m.•24 views

barry-rfi.txt

--==+================================================================================+==-- --==+ barryvancompo-0.3 Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: barryvancompo-0.3 Remote File Inclusion...

7.4AI score

SaveExploits0

exploitpack•added 2008/02/28 12:00 a.m.•17 views

Barryvan Compo Manager 0.3 - Remote File Inclusion

Barryvan Compo Manager 0.3 - Remote File Inclusion --==+================================================================================+==-- --==+ barryvancompo-0.3 Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ9...

0.3AI score

SaveExploits0

Rapid7 Vulnerability Database (full)•added 2008/02/28 12:00 a.m.•10 views

CVE-2008-1066: Improper Input Validation

The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...

7.5CVSS6AI score0.01954EPSS

SaveExploits0References2

Exploit DB•added 2008/02/28 12:00 a.m.•42 views

Barryvan Compo Manager 0.3 - Remote File Inclusion

6.8CVSS5.8AI score0.23606EPSS

SaveExploits2

securityvulns•added 2008/02/22 12:00 a.m.•65 views

Xoops-2.0.16 Remote File Inclusion

In the Script Xoops-2.0.16 are Remote File Inclusion Bugs +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Script : xoops-2.0.16-Kararli Discovered By : F10 Contact : [email protected] WebSite : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy...

0.6AI score

SaveExploits0

Packet Storm•added 2008/01/07 12:00 a.m.•35 views

uebimiau-disclose.txt

---- Uebimiau Web-Mail Remote File Reader ... ITDefence.ru Antichat.ru Uebimiau Web-Mail Remote File Reader Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 //// // //\ \ \...

7.4AI score

SaveExploits0

seebug.org•added 2007/12/26 12:00 a.m.•116 views

Tikiwiki CMS tiki-listmovies.php文件目录遍历漏洞

BUGTRAQ ID: 27008 TikiWiki是一款网站内容管理系统，基于PHP+ADOdb+Smarty等技术构建。 TikiWiki的实现上存在输入验证漏洞，远程攻击者可能利用此漏洞非授权访问到服务器上任意文件的部分内容。 TikiWiki的tiki-listmovies.php脚本允许用户获得任意文件的前1000个字节。该脚本将movie参数值设置为$movie，删除最后4字节并添加.xml扩展名，然后调用fopen$confFile,'r'打开文件并读取文件的前1000个字节，接着传送这1000字节用作MovieWidth和MovieHeight...

6.9AI score

SaveExploits0

Prion•added 2007/10/12 9:17 p.m.•37 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 encopyrite.php, 2 vicopyrite.php, and 3 arcopyrite.php in language/ directories; 4 classaccess.php, 5 classdepartment.php, 6...

7.5CVSS7.9AI score0.07116EPSS

SaveExploits3References13Affected Software1

Rapid7 Vulnerability Database (full)•added 2007/06/11 12:00 a.m.•4 views

CVE-2007-3171: Undefined Security Weakness

Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an invalid value of the 1 smarty or 2 selectedtheme parameter, which reveals the path in various error messages...

5CVSS5.9AI score0.02456EPSS

SaveExploits2References1

Prion•added 2007/05/11 10:19 a.m.•17 views

Remote file inclusion

PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP code via a URL in the systemsmartydir parameter...

7.5CVSS8AI score0.08181EPSS

SaveExploits2References5Affected Software1

Positive Technologies•added 2007/05/02 12:00 a.m.•21 views

PT-2007-3781 · Pixaria · Pixaria Gallery

Name of the Vulnerable Software and Affected Versions: Pixaria Gallery versions prior to 1.4.3 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the cfgsysbase path parameter in the resources/includes/class.Smarty.php file. Recommendations: For versions pri...

7.5CVSS7.3AI score0.11782EPSS

SaveExploits1References11

Prion•added 2007/04/27 12:19 a.m.•18 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP code via a URL in the pluginfile parameter to 1 Smarty.class.php and 2 SmartyCompiler.class.php in inc/libs/; 3 core.displaydebugconsole.php, 4 core.loadplugins.php, 5...

7.5CVSS8.2AI score0.02981EPSS

SaveExploits1References4

Packet Storm•added 2007/04/17 12:00 a.m.•41 views

pizaria-rfi.txt

Pixaria Gallery 1.x class.Smarty.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : Pixaria Gallery 1.x Discovered By : irvian scripts site : http://pixaria.com/ Thanks To : hitamputih nyubicrew patihack specia...

SaveExploits0

seebug.org•added 2007/04/15 12:00 a.m.•60 views

Pixaria Gallery 1.x (class.Smarty.php) Remote File Include Vulnerability

No description provided by source. Pixaria Gallery 1.x class.Smarty.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : Pixaria Gallery 1.x Discovered By : irvian scripts site : http://pixaria.com/ Thanks To :...

7.1AI score

SaveExploits0

Exploit DB•added 2007/04/14 12:00 a.m.•47 views

Pixaria Gallery 1.x - 'class.Smarty.php' Remote File Inclusion

7.5CVSS5.8AI score0.11782EPSS

SaveExploits1

attackerkb•added 2007/04/12 7:19 p.m.•18 views

CVE-2007-2021

Multiple PHP remote file inclusion vulnerabilities in Pineapple Technologies Lore 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 langpath parameter to thirdparty/phpmailer/class.phpmailer.php or the 2 getpluginfilepath parameter to...

7.5CVSS6.2AI score0.01474EPSS

SaveExploits0References3

CVE•added 2007/04/12 7:00 p.m.•75 views

CVE-2007-2021

CVE-2007-2021: Multiple PHP remote file inclusion flaws in Pineapple Technologies Lore 1 permit remote code execution via crafted URLs in the lang_path parameter of third_party/phpmailer/class.phpmailer.php or the get_plugin_file_path parameter of third_party/smarty/libs/plugins/function.html_che...

7.5CVSS6.5AI score0.01225EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2007/04/12 7:00 p.m.•36 views

CVE-2006-7193

PHP remote file inclusion vulnerability in unittest/testcases.php in Smarty 2.6.1 allows remote attackers to execute arbitrary PHP code via a URL in the SMARTYDIR parameter. NOTE: this issue is disputed by CVE and a third party because SMARTYDIR is a constant...

7.5AI score0.0148EPSS

SaveExploits1References4

CVE•added 2007/04/12 7:00 p.m.•64 views

CVE-2006-7193

CVE-2006-7193 is a confirmed detail in the connected documents for Smarty 2.6.1. The vulnerability is a PHP remote file inclusion in Smarty’s unit_test/test_cases.php that could allow an attacker to execute arbitrary PHP code via a URL in the SMARTY_DIR parameter. The issue is explicitly describe...

7.5CVSS7.5AI score0.0148EPSS

SaveExploits1References4Affected Software1

Prion•added 2007/04/12 1:19 a.m.•34 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pluginfile parameter to smarty/internals/core.loadpulgins.php or the 2 rootpath parameter to index.php. NOTE: CVE disputes 1 because the inclusion occurs...

7.5CVSS7.9AI score0.01356EPSS

SaveExploits0References3Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by