115 matches found
Snoopy '_httpsrequest()'任意命令执行漏洞
BUGTRAQ ID: 31887 CNCAN ID：CNCAN-2008102405 Snoopy是一款模拟WEB浏览器的PHP类。 Snoopy 'httpsrequest'存在输入验证问题，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 目前没有详细漏洞细节提供。 Snoopy Snoopy 1.2.3 Snoopy Snoopy 1.2.1 Snoopy Snoopy 1.2 Snoopy Snoopy 1.0 1 Snoopy Snoopy 0.94 Snoopy Snoopy 0.93 Snoopy Snoopy 0.92 Snoopy Snoopy 0.91 升级程序：...
wordpress -- snoopy "_httpsrequest()" shell command execution vulnerability
The Wordpress development team reports: A vulnerability in the Snoopy library was announced today. WordPress uses Snoopy to fetch the feeds shown in the Dashboard. Although this seems to be a low risk vulnerability for WordPress users, we wanted to get an update out immediately...
xoops-1.3.10 shell command execute vulnerability ( causing snoopy class )
== xoops-1.3.10 shell command execute vulnerability causing snoopy class == Author: geinblues geinblues at gmail dot com DATE: 9.7.2008 Site: http://enterblue.net/x90c/ Risk: Midium == 0 Vulnerability Tracing Tracing BREAK 0 BREAK 6 /xoops-1.3.10/html/class/snoopy.class.php...
xoops-exec.txt
== xoops-1.3.10 shell command execute vulnerability causing snoopy class == Author: geinblues geinblues at gmail dot com DATE: 9.7.2008 Site: http://enterblue.net/x90c/ Risk: Midium == 0 Vulnerability Tracing Tracing BREAK 0 BREAK 6 /xoops-1.3.10/html/class/snoopy.class.php...
WordPress MU 1.3.2 - active_plugins option Code Execution
WordPress MU 1.3.2 - activeplugins option Code Execution Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to execute arbitrary PHP / includeonce './class-snoopy.php'; // Fix Snoopy cla...
Wordpress MU < 1.3.2 active_plugins option Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Wordpress MU Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins optio...
Wordpress MU < 1.3.2 active_plugins option Code Execution Exploit
No description provided by source. ?php / WordPress MU blog's options overwrite Credits : Alexander Concha alex at buayacorp dot com Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html This exploit uses activeplugins option to...
[SA17779] Ampache Snoopy "_httpsrequest()" Command Injection Vulnerability
TITLE: Ampache Snoopy "httpsrequest" Command Injection Vulnerability SECUNIA ADVISORY ID: SA17779 VERIFY ADVISORY: http://secunia.com/advisories/17779/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Ampache 3.x http://secunia.com/product/5347/ DESCRIPTION: A...
CVE-2005-3330
The httpsrequest function in Snoopy 1.2, as used in products such as 1 MagpieRSS, 2 WordPress, 3 Ampache, and 4 Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function...
CVE-2005-3330
The CVE-2005-3330 entry concerns Snoopy 1.2, where the _httpsrequest function allows remote command execution via shell metacharacters in an HTTPS URL to an SSL page, due to improper handling in the fetch function. Affected usage includes MagpieRSS, WordPress, Ampache, and Jinzora. Documented imp...
CVE-2005-3330
The httpsrequest function in Snoopy 1.2, as used in products such as 1 MagpieRSS, 2 WordPress, 3 Ampache, and 4 Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function...
SEC-20051025-0.txt
SEC-CONSULT Security Advisory 20051025-0 ====================================================================== title: Snoopy Remote Code Execution Vulnerability program: Snoopy PHP Webclient vulnerable version: 1.2 and earlier homepage: http://snoopy.sourceforge.net found: 2005-10-10 by: D. Fabi...
WordPress <= 1.2 - Remote Code Execution
Because of this vulnerability in The httpsrequest function in Snoopy, the attackers can execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, that is not properly handled by the fetch function. Solution Update the WordPress to the latest available versi...
Snoopy 0.9x/1.0/1.2 - Arbitrary Command Execution
source: https://www.securityfocus.com/bid/15213/info Snoopy is prone to a vulnerability that lets attackers execute arbitrary commands because the application fails to properly sanitize user-supplied input. This issue may facilitate unauthorized remote access to the application in the context of...
Snoopy 0.9x1.01.2 - Arbitrary Command Execution
Snoopy 0.9x1.01.2 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/15213/info Snoopy is prone to a vulnerability that lets attackers execute arbitrary commands because the application fails to properly sanitize user-supplied input. This issue may facilitate unauthorized...