CVE-2008-0148: Undefined Security Weakness

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request...

CVE-2008-0149

Affected software: TUTOS 1.3. The CVE-2008-0149 entry describes a remote information disclosure vulnerability where an attacker can read system information by directly requesting php/admin/phpinfo.php, which invokes phpinfo(). The issue is categorized as a PHP information-disclosure via HTTP. Con...

CVE-2008-0148

CVE-2008-0148 affects TUTOS 1.3, where access to php/admin/cmd.php is not restricted, allowing remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request. The vulnerability is described with a base CVSSv2 score of 10.0 (HIGH) and a complete impact on confidenti...

CVE-2008-0148

TUTOS 1.3 does not restrict access to php/admin/cmd.php, which allows remote attackers to execute arbitrary shell commands via the cmd parameter in a direct request...

CVE-2008-0149: Undefined Security Weakness

TUTOS 1.3 allows remote attackers to read system information via a direct request to php/admin/phpinfo.php, which calls the phpinfo function...

TUTOS 1.3 (cmd.php) Remote Command Execution Vulnerability

No description provided by source. AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : TUTOS Tested in version 1.3 other versions may also be affected. Download : http://www.tutos.org/homepage/index.html BUG : Command Execution Vulnerability...

tutos-exec.txt

AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : TUTOS Tested in version 1.3 other versions may also be affected. Download : http://www.tutos.org/homepage/index.html BUG : Command Execution Vulnerability | 3xpl0it4t10n -1- : Command Execution...

TUTOS 1.3 (cmd.php) Remote Command Execution Vulnerability

Exploit for unknown platform in category web applications ========================================================== TUTOS 1.3 cmd.php Remote Command Execution Vulnerability ========================================================== AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net...

TUTOS 1.3 - cmd.php Remote Command Execution

TUTOS 1.3 - cmd.php Remote Command Execution AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : TUTOS Tested in version 1.3 other versions may also be affected. Download : http://www.tutos.org/homepage/index.html BUG : Command Execution Vulnerability | 3xpl0it4t10n -1- :...

TUTOS 1.3 - 'cmd.php' Remote Command Execution

AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : TUTOS Tested in version 1.3 other versions may also be affected. Download : http://www.tutos.org/homepage/index.html BUG : Command Execution Vulnerability | 3xpl0it4t10n -1- : Command Execution...

Debian DSA-980-1 : tutos - several vulnerabilities

Joxean Koret discovered several security problems in tutos, a web-based team organization software. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2004-2161 A SQL injection vulnerability allows the execution of SQL commands through the linkid parameter ...

[SECURITY] [DSA 980-1] New tutos package fixes several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 980-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 22nd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 980-1] New tutos package fixes several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 980-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 22nd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 980-1] New tutos packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 980-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 22nd, 2006 http://www.debian.org/security/faq -...

CVE-2004-2162

CVE-2004-2162 affects TutOS (tutos) 1.1, with Cross-Site Scripting (XSS) vulnerabilities in the search function of the address book and in app_new.php, allowing remote attackers to inject arbitrary web script or HTML via the search field or the t parameter. Root cause: improper handling of user-s...

CVE-2004-2161

The CVE-2004-2161 issue affects TUTOS 1.1, where an SQL injection vulnerability exists in file_overview.php via the link_id parameter. This vulnerability allows a remote attacker to execute arbitrary SQL commands, enabling potential data disclosure or manipulation. Public advisories in the connec...

CVE-2004-2162

Multiple cross-site scripting XSS vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the search field of the Address Module or 2 the t parameter to appnew.php...

CVE-2004-2161

SQL injection vulnerability in fileoverview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

CVE-2004-2162: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the search field of the Address Module or 2 the t parameter to appnew.php...

CVE-2004-2161: Undefined Security Weakness

SQL injection vulnerability in fileoverview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the linkid parameter...