2262 matches found
Remote file inclusion
PHP remote file inclusion vulnerability in admin/nav.php in AT Contenator 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the RootToScript parameter...
CVE-2007-0983
PHP remote file inclusion vulnerability in admin/nav.php in AT Contenator 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the RootToScript parameter...
CVE-2007-0983
PHP remote file inclusion vulnerability in admin/nav.php in AT Contenator 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the RootToScript parameter...
CVE-2007-0983
CVE-2007-0983 is a PHP remote file inclusion vulnerability affecting AT Contenator 1.0 and earlier. The flaw exists in _admin/nav.php and allows an attacker to pass a URL via the Root_To_Script parameter, potentially causing arbitrary PHP code execution on the server. According to NVD, the CVSS v...
CVE-2007-0983: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in admin/nav.php in AT Contenator 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the RootToScript parameter...
AT Contenator <= v1.0 (Root_To_Script) Remote File Include Exploit
No description provided by source. AT Contenator //'=============================================================================================== //'Script Name: AT Contenator //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... &...
AT Contenator <= v1.0 (Root_To_Script) Remote File Include Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleAT Contenator = v1.0 RootToScript Remote File Include Exploit/title script language="JavaScript"...
AT Contenator 1.0 - Root_To_Script Remote File Inclusion
AT Contenator 1.0 - RootToScript Remote File Inclusion AT Contenator //'=============================================================================================== //'Script Name: AT Contenator //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey //...
AT Contenator <= v1.0 (Root_To_Script) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================== AT Contenator AT Contenator //'=============================================================================================== //'Script Name: AT Contenator //'.... //'...
AT Contenator 1.0 - 'Root_To_Script' Remote File Inclusion
AT Contenator //'=============================================================================================== //'Script Name: AT Contenator //'.... //'.. //'ERROR--------------------------------------------------------- // ajann,Turkey // ... //Basic exploit,but any time : var path="/classes/"...
ProCheckUp Security Advisory 2006.14
PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability This advisory has been published following consultation with UK NISCC http://www.niscc.gov.uk/ Date Found: 3rd November 2006 Date Public: 22nd January 2007 Vulnerable: Phones confirme...
PA168 Chipset IP Phones Weak Session Management Exploit
No description provided by source. !/bin/bash PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability Author: Adrian Pastor adrian.pastor-AT-procheckup.com from ProCheckUp This advisory has been published following consultation with UK NIS...
CVE-2006-6717
The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documentation, which allows remote attackers to conduct attacks against the switch from unexpected locations...
CVE-2006-6717
The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documentation, which allows remote attackers to conduct attacks against the switch from unexpected locations...
CVE-2006-6718
The Allied Telesis AT-9000/24 Ethernet switch has a default password for its admin account, "manager," which allows remote attackers to perform unauthorized actions...
CVE-2006-6717
The CVE-2006-6717 entry affects the Allied Telesis AT-9000/24 Ethernet switch. The vulnerability arises because the device accepts management packets from arbitrary VLANs, contrary to documentation, enabling remote attackers to reach the switch from unexpected locations. The impact is described i...
CVE-2006-6718
The CVE-2006-6718 issue involves the Allied Telesis AT-9000/24 Ethernet switch, where the admin account uses a default password, "manager". This enables remote attackers to perform unauthorized actions. The entry is accompanied by a CVSS v2 base score of 7.5 (HIGH) with network attack vector, no ...
CVE-2006-6718: Undefined Security Weakness
The Allied Telesis AT-9000/24 Ethernet switch has a default password for its admin account, "manager," which allows remote attackers to perform unauthorized actions...
CVE-2006-6717: Undefined Security Weakness
The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documentation, which allows remote attackers to conduct attacks against the switch from unexpected locations...
