PT-2009-2014 · Simple Machines · Simple Machines Forum

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF version 1.1.4 Description: The issue allows remote attackers to potentially execute arbitrary PHP code. This is achieved via a URL in the settingsdefault theme dir parameter to "Sources/Subs-Graphics.php" and...

Ubuntu Update for firefox-themes-ubuntu regression USN-398-3

Ubuntu Update for Linux kernel vulnerabilities USN-398-3 OpenVAS Vulnerability Test $Id: gbubuntuUSN3983.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for firefox-themes-ubuntu regression USN-398-3 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-398-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6403: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpldir parameter...

Fedora Update for xfwm4-themes FEDORA-2007-4385

Check for the Version of xfwm4-themes OpenVAS Vulnerability Test Fedora Update for xfwm4-themes FEDORA-2007-4385 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for xfwm4-themes FEDORA-2007-4368

Check for the Version of xfwm4-themes OpenVAS Vulnerability Test Fedora Update for xfwm4-themes FEDORA-2007-4368 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for xfwm4-themes FEDORA-2007-4385

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for xfwm4-themes FEDORA-2007-4368

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

GRBoard 1.8 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. GRBoard 1.8 Remote File Inclusion Vulnerability bY [email protected] / GRBoard VERSION 1.8 is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion vulnerability. Here is the...

GRBoard 1.8 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== GRBoard 1.8 Multiple Remote File Inclusion Vulnerabilities ========================================================== / GRBoard VERSION 1.8 is bulletin board system of Korea. It is...

CVE-2008-5922: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...

CVE-2008-5881

Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 gatewaymodule parameter to plugin/gateway/gnokii/init.php and the 2 themesmodule parameter to plugin/themes/default/init.php...

CVE-2009-0103: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 appspathplug parameter to plugin/gateway/gnokii/init.php, the 2 appspaththemes parameter to plugin/themes/default/init.php, and the 3 appspathlibs parameter ...

PlaySms 0.9.3 - Multiple LocalRemote File Inclusions

PlaySms 0.9.3 - Multiple LocalRemote File Inclusions ==:RFI/LFI:== ===================== script:playsms 0.9.3 ========================================================================== download from:http://downloads.sourceforge.net/playsms/playsms-0.9.3.tar.gz?modtime=1211284086&bigmirror=0...

playSMS 0.9.3 Multiple Remote/Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== playSMS 0.9.3 Multiple Remote/Local File Inclusion Vulnerabilities ================================================================== ==:RFI/LFI:== =====================...

CFAGCMS Remote File Inclusion

Author : BeyazKurt - [email protected] Script : CFAGCMS Download : http://sourceforge.net/project/showfiles.php?groupid=197936 Vuln : Page themes/default/index.php, Line 15-16 : Site.Com/cfagcms/themes/default/index.php?main=SHELL Site.Com/cfagcms/themes/default/index.php?right=SHELL SHQİPTAR!...

Segue CMS themesdir Parameter Remote File Include Vulnerability

The remote web server contains a PHP script that is affected by a remote file include issue. Description: The remote web server is running Segue CMS, an open source content management system tailored for educational institutions. The version of Segue CMS installed on the remote host fails to...

CVE-2008-4155

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...

[DSECRG-08-037] Multiple Local File Include Vulnerabilities in Pluck CMS 4.5.2

Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date of Public Advisory: 25.08.2008...

LoveCMS 1.6.2 Final - Update Settings

!/usr/bin/ruby Exploit by PoMdaPiMp! --------------------- pomdapimpatgmaildotcom LoveCMS Exploit Series Episode 3: changing site settings ... Description: Simply change the site settings ! Usage: ./LoveCMS3settings.rb Ex: ./LoveCMS2themes.rb http://site.com/lovecms/ Tested on: lovecms1.6.2final...