33 matches found
CVE-2008-6771
YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a direct request to user/uploads/phpinfo.php, which calls the phpinfo function...
CVE-2008-6772
login/registerform.php in YourPlace 1.0.2 and earlier does not check that a username already exists when a new account is created, which allows remote attackers to bypass intended access restrictions by registering a new account with the username of a target user...
CVE-2008-6772
The CVE affects YourPlace 1.0.2 and earlier where login/register_form.php does not verify that a username already exists during account creation, allowing a remote attacker to bypass access restrictions by registering a new account with a target user’s username. Documented impact is a Partial con...
CVE-2008-6770
CVE-2008-6770 affects YourPlace 1.0.2 and earlier. It stems from insufficient access control that allows remote attackers to retrieve a users.txt database file containing credentials by requesting it directly from the web root. The vulnerability detail is confined to stored sensitive data exposur...
CVE-2008-6769
CVE-2008-6769 : Unrestricted file upload vulnerability in upload.php of YourPlace 1.0.2 and earlier. Affected component: YourPlace upload mechanism (upload.php). Root cause: allowing upload of files with executable extensions and access via a direct URL, enabling remote authenticated users to exe...
CVE-2008-6445
Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper authentication and the ability to upload arbitrary PHP code. NOTE: some of these details are obtained from third party information...
Authentication flaw
Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper authentication and the ability to upload arbitrary PHP code. NOTE: some of these details are obtained from third party information...
CVE-2008-6445
Technical details about CVE-2008-6445 are not publicly available in the provided documents. The entries repeat generic vulnerability notes with no concrete affected versions, exploit vectors, or remediation steps.
CVE-2008-6445
Unspecified vulnerability in YourPlace before 1.0.1 has unknown impact and attack vectors, possibly related to improper authentication and the ability to upload arbitrary PHP code. NOTE: some of these details are obtained from third party information...
yourplace 1.0.2 - Multiple Vulnerabilities Remote Code Execution
yourplace 1.0.2 - Multiple Vulnerabilities Remote Code Execution START 0x01 Informations: Script : YourPlace 0.5 beta 1 Download : http://www.hotscripts.com/jump.php?listingid=80545&jumptype=1 Vulnerability : DB Disclosure / Arbitrary Data Saving RCE EXPLOIT / Arbitrary File Upload / PHPInfo...
YourPlace <= 1.0.2 Multiple Remote Vulnerabilities + RCE Exploit
Exploit for unknown platform in category web applications ================================================================ YourPlace = 1.0.2 Multiple Remote Vulnerabilities + RCE Exploit ================================================================ START 0x01 Informations: Script : YourPlace 0...
yourplace 1.0.2 - Multiple Vulnerabilities / Remote Code Execution
START 0x01 Informations: Script : YourPlace 0.5 beta 1 Download : http://www.hotscripts.com/jump.php?listingid=80545&jumptype=1 Vulnerability : DB Disclosure / Arbitrary Data Saving RCE EXPLOIT / Arbitrary File Upload / PHPInfo Disclosure / User Change Account Author : Osirys Contact :...
YourPlace <= 1.0.2 Multiple Remote Vulnerabilities + RCE Exploit
No description provided by source. START 0x01 Informations: Script : YourPlace 0.5 beta 1 Download : http://www.hotscripts.com/jump.php?listingid=80545&jumptype=1 Vulnerability : DB Disclosure / Arbitrary Data Saving RCE EXPLOIT / Arbitrary File Upload / PHPInfo Disclosure / User Change Account...