PHPSherpa Racine远程文件包含漏洞

PhpSherpa是一款基于PHP的WEB应用程序。 PhpSherpa不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'config.inc.php'脚本对用户提交的'Racine'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 PhpSherpa 目前没有解决方案提供： http://linuxeduquebec.org/article.php3?idarticle=59 http://www.example.com/include/config.inc.php?racine=Bad Code...

BBClone 0.31 (selectlang.php) Remote File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:bbclone Affected Version:0.31 Downlaoad:http://sindominio.net/ayuda/bbclone-0.31-esp.zip...

BBClone 0.31 (selectlang.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= BBClone 0.31 selectlang.php Remote File Inclusion Vulnerability =================================================================...

phpXD <= 0.3 (path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================= phpXD = 0.3 path Remote File Inclusion Vulnerability ======================================================= | | \ | Dr Max Virus | / \ | | / / || \ / ...

BBClone 0.31 - 'selectlang.php' Remote File Inclusion

------------------------------------------------------------------------------------------------------------------------ Script:bbclone Affected Version:0.31 Downlaoad:http://sindominio.net/ayuda/bbclone-0.31-esp.zip...

phpXD 0.3 - 'path' Remote File Inclusion

| | \ | Dr Max Virus | / \ | | / / || \ / \ ------------------------------------------------------------------------------------------------------------------------ Script:phpxd Affected Version:0.3 Downlaoad:http://websec.science.uva.nl/kaper/xmlarchief/phpXD/phpxd0.3.tar.gz...

PhpSherpa (include/config.inc.php) Remote File Include Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:PhpSherpa Affected Version:.... Downlaoad:http://linuxeduquebec.org/IMG/tgz/sherpa.tgz...

PhpSherpa (include/config.inc.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ==================================================================== PhpSherpa include/config.inc.php Remote File Include Vulnerability ====================================================================...

MySpeach <= 2.1b (up.php) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== MySpeach = 2.1b up.php Remote Inclusion Vulnerability ========================================================...

Neon Labs Website 3.2 - nl.php?g_strRootDir Remote File Inclusion

Neon Labs Website 3.2 - nl.php?gstrRootDir Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...

Oreon &lt;= 1.2.3 RC4 (lang/index.php file) Remote InclusionVulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...

CVE-2006-6839: Undefined Security Weakness

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection targets."...

phpBB < 2.0.22 Multiple Vulnerabilities

The version of phpBB installed on the remote host fails to properly block 'bad' redirection targets. In addition, it reportedly contains a non-persistent cross-site scripting flaw involving its private messaging functionality and several other issues. At a minimum, a remote attacker can leverage...

XSS in JAB Guest Book

Script Name: JAB Guest Book Authors: [email protected] Website: James Barnsley Bug Report: NetJackal njAThackerzDOTir & nima501ATyahooDOTcom Status: Patch not released First i should apologize for my bad english. Intro: JAB Guest Book is a free guest book written in PHP, it works using flat fil...

CVE-2006-6062: Undefined Security Weakness

Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service crash via a malformed UDTO HFS+ disk image, such as with "bad sectors," which triggers memory corruption...

MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit

No description provided by source. / iishack 2000 - eEye Digital Security - 2001 This affects all unpatched windows 2000 machines with the .printer isapi filter loaded. This is purely proof of concept. Quick rundown of the exploit: Eip overruns at position 260 i have 19 bytes of code to jump back...

P-News 1.16 - Remote File Inclusion

============================================ P-News 1.16, 1.17 Remote File Inclusion Vulnerability ============================================ Discovered by vegas78 - feel82atweb.de ============================================ Greetz: scoper, corny, smaesch0r, Sascha Schmalz, ReFleCtion, BleX,...

security flaw

Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service file system panic via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle inode number, which triggers an error and causes an exported directory to be remounted...

CVE-2006-4143

Netgear FVG318 running firmware 1.0.40 allows remote attackers to cause a denial of service router reset via TCP packets with bad checksums...

CVE-2006-4143: Undefined Security Weakness

Netgear FVG318 running firmware 1.0.40 allows remote attackers to cause a denial of service router reset via TCP packets with bad checksums...