CVE-2008-6315

CVE-2008-6315 describes a PHP remote file inclusion vulnerability in _conf/core/common-tpl-vars.php of PHPmyGallery 1.0 beta2, where an attacker can supply a URL in the confdir parameter to execute arbitrary PHP code remotely. Related entries cover a separate but similar issue (CVE-2008-6316 ) in...

Microsoft Internet Explorer NULL Pointer DoS Vulnerability

This host has Internet Explorer installed and is prone to Remote Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmsienullptrdosvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer NULL Pointer DoS Vulnerability Authors: Sharath S Copyright: Copyright c 200...

PT-2008-6770 · Netatalk +1 · Netatalk +1

Name of the Vulnerable Software and Affected Versions: Netatalk versions prior to 2.0.4-beta2 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a print request. This can be achieved by using certain variables in a pipe command for the print...

PHPCMS2008 BETA2 tasteless 0day a-vulnerability warning-the black bar safety net

data\cachemodel\membersearch.class.php username directly get into SQL. Tasteless is because of this hole to the administrator to set the 'registered members' to have a 'search' function. if$this-modelid if$where $where = "AND $where"; if$this-modelid == 1 0 && $GET'username' $username =...

Remote file inclusion

PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the oeclasspath parameter, a different vector than CVE-2008-4329...

CVE-2008-4719

OpenEngine 2.0 beta2 contains a PHP remote file inclusion flaw in cms/classes/openengine/filepool.php when register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying a URL in the oe_classpath parameter, a different vector than CVE-2008-4329. The vulnerability is ...

openEngine 2.0 beta2 Remote File Inclusion Vulnerability

No description provided by source. Author : By CrackersChild Contact: [email protected] Greetz : str0ke & All My Friends Script : openEngine 2. 0 beta2 Remote File include Vulnerable Download :http://downloads.sourceforge.net/openengine/openengine20beta2.zip?modtime=1203083918&bigmirror=0...

openEngine 2.0 beta2 - Remote File Inclusion

Author : By CrackersChild Contact: [email protected] Greetz : str0ke & All My Friends Script : openEngine 2. 0 beta2 Remote File include Vulnerable Download :http://downloads.sourceforge.net/openengine/openengine20beta2.zip?modtime=1203083918&bigmirror=0 Exploit :...

yapbb-rfi.txt

┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

Fedora 8 : speex-1.2-0.4.beta2 (2008-3103)

Security update: Add mode checks to speexpackettoheader to protect applications using speex library and not having proper checks CVE-2008-1686, 441239, https://trac.xiph.org/changeset/14701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Joomla! 1.5 Beta1/Beta2/RC1 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php / Explanation: Although the comment points out that the "filter" variable is supposedly cleansed there is no input validation being performed except for the fact that all input is being turned into lowercase. Affected...

Microsoft Internet Explorer Document.Domain跨域同源覆盖漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在绕过同源策略问题，远程攻击者可以利用漏洞访问其他目标域或者进行内容伪造攻击。 攻击者可以通过修改document.domain中的值，构建恶意WEB页，诱使用户访问来触发。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Citrix ICA Client for Windows 4.0...

ClientExec 3.0 - index.php Multiple Cross-Site Scripting Vulnerabilities

ClientExec 3.0 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24061/info ClientExec is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

RoseOnlineCMS 3 beta2 - 'op' Local File Inclusion

!/usr/bin/perl RoseOnlineCMS v3 B1opLocal File Inclusion Exploit P.Script: http://heanet.dl.sourceforge.net/sourceforge/rosecms/RoseOnlineCMSv3B1.rar V.Code: $op = !isset$GET'op' ? home : $GET'op' ; if isfile"modules/".$op.".php" include"modules/".$op.".php"; use IO::Socket; use LWP::Simple; ripp...

FileZilla多个格式串漏洞

FileZilla是一款免费的FTP客户端软件。 FileZilla处理用户名数据存在问题，远程攻击者可以利用漏洞进行格式串攻击，可能以进程权限执行任意指令。 如果用户名包含%字符，连接将会提示错误，而造成格式串攻击，可能以进程权限执行任意指令。 FileZilla 3.0 -beta4 FileZilla 3.0 -beta3 FileZilla 3.0 -beta2 FileZilla 3.0 -beta1 升级程序： FileZilla FileZilla 3.0 -beta1 FileZilla FileZilla3.0.0-beta5src.tar.bz2...

CVE-2006-2486

CVE-2006-2486 affects YapBB 1.2 Beta2 and earlier. The vulnerability resides in find.php, where the userID parameter can be manipulated to cause an SQL injection, enabling remote attackers to execute arbitrary SQL commands.

CVE-2006-2486

SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter...

CVE-2006-1265

CVE-2006-1265 targets the xhawk.net discussion 2.0 beta2 application, where a flaw in the discussion.class.php logic allows a remote attacker to inject SQL via the view parameter, potentially impacting confidentiality, integrity, and availability. The public data lists a base CVSS v2 score of 7.5...

CVE-2006-1265

SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter...

Farsinews 2.1 - 'Loginout.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/16440/info FarsiNews is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious P...