8349 matches found
k_shoutBox <= 4.4 Remote File Inclusion Vulnerability
No description provided by source. Kurdish Security ShoutBox Remote Command Execution Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : ShoutBox Site : http://www.knusperleicht.at Code : // // INCLUDE PATH define'SBINCLUDEPATH',...
phpAuction 2.1 - 'phpAds_path' Remote File Inclusion
+-------------------------------------------------------------------- + + PHPAuction 2.1 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: PHPAuction 2.1 maybe higher + Venedor ...........: http://www.phpauction.net, + Class...
Mambo Component User Home Pages 0.5 - Remote File Inclusion
Mambo Component User Home Pages 0.5 - Remote File Inclusion Kurdish Security Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : User Home Pges Site : www.ravensportal.co.uk Thanx :...
a6mambohelpdesk Mambo Component <= 18RC1 Remote Include Vulnerability
a6mambohelpdesk Mambo Component = 18RC1 Remote Include Vulnerability Rish : High Class : Remote Script : a6mambohelpdesk Thanx : www.lezr.com/vb codes ? include "$mosConfiglivesite/components/coma6mambohelpdesk/about.html" ; ? d0rkiz : allinurl:"coma6mambohelpdesk"...
BlueSpy-adv-multibanners.txt
SolpotCrew Community Com Multibanners Remote File Inclusion mosConfigabsolutepath original advisory : http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt Bug Found By :Blue|Spy contact: [email protected] Website : http://kunamgede.biz, http://blue-spy.net Greetz: h4ntu , Fungky, Solpot, Matdhu...
Mambo Component multibanners 1.0.1 - Remote File Inclusion
Mambo Component multibanners 1.0.1 - Remote File Inclusion SolpotCrew Community Com Multibanners Remote File Inclusion mosConfigabsolutepath original advisory : http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt Bug Found By :Blue|Spy contact: [email protected] Website : http://kunamgede.biz,...
Buffer overflow
Buffer overflow in eBay Enhanced Picture Services aka EPUImageControl Class in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item SYI, Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary...
CVE-2006-1176
Buffer overflow in eBay Enhanced Picture Services aka EPUImageControl Class in EUPWALcontrol.dll before 1.0.3.48, as used in Sell Your Item SYI, Setup & Test eBay Enhanced Picture Services, Picture Manager Enhanced Uploader, and CARad.com Add Vehicle, allows remote attackers to execute arbitrary...
CVE-2006-3019
Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPCMSINCLUDEPATH parameter to files in parser/include/ including 1 class.parserphpcms.php, 2 class.sessionphpcms.php, 3 class.editphpcms.php, 4...
PHP MESSENGER 1.0 Version - Remote File Include Vulnerability
SaVSaK.CoM | SpC-x - TheBeKiR | PHP MESSENGER 1.0 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : PHP MESSENGER Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : require $pathtophpmessengerscript; if fileexists$pathtophpconvscript require...
S H O U T B O X (v1.5) Version - Remote File Include Vulnerability
SaVSaK.CoM | SpC-x - TheBeKiR | S H O U T B O X v1.5 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : S H O U T B O X Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : $thisdir = strreplace'', '/', dirnameFILE; include"$thisdir/config.inc.php";...
SAXON 4.6 Version - Remote File Include Vulnerabilities
SaVSaK.CoM | SpC-x - The-BeKiR | SAXON 4.6 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : SAXON Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke Code : include"functions.php"; include "config.php"; include $template; Vulnerable ...
# MHG Security Team ---Rumble 1.02 version Remote File Inc.
Milli-Harekat Advisory www.milli-harekat.org Rumble = 1.02 version - Remote File Include Vulnerabilities Risk : high Class: Remote Script : Rumble 1.02 version Msn : erne at ernealizm dot com Credits : ERNE Thanks : DjReMix,Thebekir,SpC-x,Eskobar,Blackened,Poizonbox,Dilejyoner And ALL MHG USERS...
Design/Logic Flaw
Secure Elements Class 5 AVR aka C5 EVM before 2.8.1 uses the same invariant RSA key for all installations, which allows remote attackers with the key to decrypt communications...
Directory traversal
Unspecified vulnerability in Secure Elements Class 5 AVR client and server aka C5 EVM before 2.8.1 allows authenticated attackers to overwrite arbitrary files 1 on a server during an update or 2 on a client via modified pathnames, possibly due to a directory traversal issue...
CVE-2006-2717
Unspecified vulnerability in Secure Elements Class 5 AVR client and server aka C5 EVM before 2.8.1 allows authenticated attackers to overwrite arbitrary files 1 on a server during an update or 2 on a client via modified pathnames, possibly due to a directory traversal issue...
CVE-2006-2707
Secure Elements Class 5 AVR server aka C5 EVM before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients...
CVE-2006-2714
Secure Elements Class 5 AVR client aka C5 EVM before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID...
Hardcoded credentials
Secure Elements Class 5 AVR server aka C5 EVM before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server...
Code injection
Secure Elements Class 5 AVR aka C5 EVM 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key for each message session, which allows remote attackers to obtain potentially sensitive information about messages...