Remote file inclusion

PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ccomponents parameter...

pindorama-rfi.txt

\|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Pindorama 0.1 Download : http://downloads.sourceforge.net/pindorama/pindorama-0.1.zip Author : S.W.A.T. HomePage : wWw.XmorS.CoM Type : Remote File Inclusion Y! ID : Svvateam...

Pindorama 0.1 - client.php Remote File Inclusion

Pindorama 0.1 - client.php Remote File Inclusion \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Pindorama 0.1 Download : http://downloads.sourceforge.net/pindorama/pindorama-0.1.zip Author : S.W.A.T. HomePage : wWw.XmorS.CoM...

Pindorama 0.1 - 'client.php' Remote File Inclusion

\|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Pindorama 0.1 Download : http://downloads.sourceforge.net/pindorama/pindorama-0.1.zip Author : S.W.A.T. HomePage : wWw.XmorS.CoM Type : Remote File Inclusion Y! ID : Svvateam...

PHP: Multiple vulnerabilities

Background PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Description Several vulnerabilities were found in PHP. Mattias Bengtsson and Philip Olausson reported integer overflows in the gdImageCreate and...

DEBIAN-CVE-2007-4894

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...

CVE-2007-4894

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...

Sql injection

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...

CVE-2007-4894

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...

CVE-2007-4894

CVE-2007-4894 covers multiple SQL injection vulnerabilities in WordPress before 2.2.3 and WordPress MU before 1.2.5a. The issue allows remote attackers to execute arbitrary SQL via the post_type parameter to the pingback.extensions.getPingbacks XML-RPC interface and other parameters related to ea...

CVE-2007-4894

Multiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user MU before 1.2.5a allow remote attackers to execute arbitrary SQL commands via the posttype parameter to the pingback.extensions.getPingbacks method in the XMLRPC interface, and other unspecified parameters...

Code injection

Unspecified vulnerability in Red Hat Network Satellite Server 5.0.0 allows remote authenticated users to execute arbitrary code via unknown vectors in a "back-end XMLRPC handler."...

CVE-2007-4132

CVE-2007-4132 affects Red Hat Network Satellite Server 5.0.0. A flaw in an unused back-end XMLRPC handler allows remote authenticated users to execute arbitrary code on the server as the apache user. The issue was fixed by upgrading to Satellite Server 5.0.1, which removes the vulnerable handler....

CVE-2007-4132

Unspecified vulnerability in Red Hat Network Satellite Server 5.0.0 allows remote authenticated users to execute arbitrary code via unknown vectors in a "back-end XMLRPC handler."...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update

Red Hat Network Satellite Server version 5.0.1 is now available which fixes a security issue in version 5.0.0. This update has been rated as having moderate security impact by the Red Hat Security Response Team. During an internal code audit, a flaw was found in an unused back-end XMLRPC handler...

USN-485-1: PHP vulnerabilities

It was discovered that the PHP xmlrpc extension did not correctly check heap memory allocation sizes. A remote attacker could send a specially crafted request to a PHP application using xmlrpc and execute arbitrary code as the Apache user. CVE-2007-1864 Stefan Esser discovered a flaw in the rando...

Debian DSA-1331-1 : php4 - several vulnerabilities

Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0207 Stefan Esser discovered HTTP respons...

Debian DSA-1330-1 : php5 - several vulnerabilities

Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1399 Stefan Esser discovered that a buffe...

DSA-1331-1 php4 - several vulnerabilities

Bulletin has no description...

FreeBSD : wordpress -- XMLRPC SQL Injection (0838733d-1698-11dc-a197-0011098b2f36)

Secunia reports : Slappter has discovered a vulnerability in WordPress, which can be exploited by malicious users to conduct SQL injection attacks. Input passed to the 'wp.suggestCategories' method in xmlrpc.php is not properly sanitised before being used in SQL queries. This can be exploited to...