eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premi...

CH-CMS.ch 2 - Multiple Arbitrary File Upload Vulnerabilities

CH-CMS.ch 2 - Multiple Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/39888/info CH-CMS.ch is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to upload...

CH-CMS.ch 2 - Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/39888/info CH-CMS.ch is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the webserver...

iPhone Springboard - Malformed Character Crash (PoC)

!/usr/bin/python iPhone Springboard crash PoC by Chase Higgins. Devices tested: iPhone 2G @ OS 3.1, iPhone 3GS @ 3.1.3 this script acts as webserver, and causes Safari, as well as Mail and Springboard to crash all these apps crash after running this exploit on the iPhone. Unable to debug any of...

phpCOIN 1.2.1 - mod Local File Inclusion

phpCOIN 1.2.1 - mod Local File Inclusion source: https://www.securityfocus.com/bid/38576/info phpCOIN is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information an...

Saskias ShopSystem - id Local File Inclusion

Saskias ShopSystem - id Local File Inclusion source: https://www.securityfocus.com/bid/38574/info Saskia's Shopsystem is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitiv...

Saskia's ShopSystem - 'id' Local File Inclusion

source: https://www.securityfocus.com/bid/38574/info Saskia's Shopsystem is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local...

PhpCDB 'lang_global' Parameter Multiple Local File Include Vulnerabilities

PhpCDB is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may...

DosyaYukle Scripti 1.0 - Remote File Upload Vulnerability

DosyaYukle Scripti 1.0 Remote File Upload Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/38527/info DosyaYukle Scripti is prone to a remote file-upload vulnerability because it fails to sufficiently sanitize user-supplied input. Attackers can exploit this...

Article Friendly - 'Filename' Local File Inclusion

source: https://www.securityfocus.com/bid/38461/info Article Friendly is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local script...

OpenInferno OI.Blogs Multiple Local File Include Vulnerabilities

OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user- supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver...

n-cms-equipe 1.1c.Debug - Multiple Local File Inclusions

n-cms-equipe 1.1c.Debug - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/39298/info n-cms-equipe is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain...

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to...

Debian DSA-1897-1 : horde3 - insufficient input sanitization

Stefan Esser discovered that Horde, a web application framework providing classes for dealing with preferences, compression, browser detection, connection tracking, MIME, and more, is insufficiently validating and escaping user provided input. The HordeFormTypeimage form element allows to reuse a...

n-cms-equipe 1.1c.Debug - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/39298/info n-cms-equipe is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary loca...

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute...

Quicksilver Forums Local File Include and Arbitrary File Upload Vulnerabilities

Quicksilver Forums is prone to a local file-include vulnerability and an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files...

New-CMS 1.08 - Multiple Local File Inclusion HTML Injection Vulnerabilities

New-CMS 1.08 - Multiple Local File Inclusion HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/38307/info New-CMS is prone to multiple local file-include vulnerabilities and an HTML-Injection vulnerability because it fails to properly sanitize user-supplied input. An attack...

GoAhead WebServer URL Encoded Slash Directory Traversal Vulnerability

Exploit for unknown platform in category web applications ===================================================================== GoAhead WebServer URL Encoded Slash Directory Traversal Vulnerability ===================================================================== simply go to http://ipaddress...

CMS Made Simple Local File Include and Cross Site Scripting Vulnerabilities

CMS Made Simple is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within...