EUVD-2008-3140

Malware in sbrugna...

CVE-2008-3150

Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in 1 usb and 2 delpag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the...

Directory traversal

Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in 1 usb and 2 delpag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the...

CVE-2008-3150

CVE-2008-3150 describes a directory traversal vulnerability in Neutrino Atomic Edition 0.8.4, where index.php can be abused to read and modify files (notably via data/sess.php with actions usb and del_pag). The underlying issue allows an attacker to access restricted files and, per the sources, c...

CVE-2008-3150

Directory traversal vulnerability in index.php in Neutrino Atomic Edition 0.8.4 allows remote attackers to read and modify files, as demonstrated by manipulating data/sess.php in 1 usb and 2 delpag actions. NOTE: this can be leveraged for code execution by performing an upload that bypasses the...

neutrino-exec.txt

!/usr/bin/perl Neutrino 0.8.4 Atomic Edition Perl exploit discovered & written by Ams [email protected] DESCRIPTION: First exploit destroys "/data/sess.php" file simply strips tags, then we are able to bypass authorization and using admin privelegies our exploit uploads basic shell to...

QNX Neutrino 0.8.4 Atomic Edition - Remote Code Execution

!/usr/bin/perl Neutrino 0.8.4 Atomic Edition Perl exploit discovered & written by Ams [email protected] DESCRIPTION: First exploit destroys "/data/sess.php" file simply strips tags, then we are able to bypass authorization and using admin privelegies our exploit uploads basic shell to...