CVE-2007-5653

The Component Object Model COM functions in PHP 5.x on Windows do not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control...

CVE-2007-5653

The CVE-2007-5653 entry concerns PHP 5.x on Windows where COM functions do not honor safe_mode or disable_functions, enabling context-dependent bypass of intended restrictions. The description cites concrete examples related to com_load_typelib and interactions with ActiveX/Windows components suc...

PHP 5.x COM functions safe_mode and disable_function bypass

No description provided by source. ?php //PHP 5.x COM functions safemode and disablefunction bypass //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //dork: intitle:phpinfo intext:"php version" +windows thanks to rgod...

PHP 5.x COM - Safe Mode / disable_functions Bypass

sounds good //The windows version of PHP has built in support for this extension. You do not need to //load any additional extension in order to use these functions. //You are responsible for installing support for the various COM objects that you intend //to use such as MS Word; we don't and can...

php5x-bypass.txt

sounds good //The windows version of PHP has built in support for this extension. You do not need to //load any additional extension in order to use these functions. //You are responsible for installing support for the various COM objects that you intend //to use such as MS Word; we don't and can...

PHP 5.x COM - Safe Mode disable_functions Bypass

PHP 5.x COM - Safe Mode disablefunctions Bypass sounds good //The windows version of PHP has built in support for this extension. You do not need to //load any additional extension in order to use these functions. //You are responsible for installing support for the various COM objects that you...

PHP 5.x COM - Safe Mode Disable Functions Bypass

PHP 5.x COM - Safe Mode Disable Functions Bypass sounds good //The windows version of PHP has built in support for this extension. You do not need to //load any additional extension in order to use these functions. //You are responsible for installing support for the various COM objects that you...

CVE-2002-2302

ShopFactory 5.5–5.8 (3D3.Com) is affected by CVE-2002-2302: remote attackers can modify prices in shopping carts by altering the price value in a hidden form field. The vulnerability arises from client-side price manipulation in the cart, enabling potential price integrity issues. The available s...

CVE-2002-2302

3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field...

CVE-2002-2303

3D3.Com ShopFactory 5.8 is affected by a vulnerability where client-side encryption and decryption of sensitive price data enables remote attackers to modify shopping cart prices by using JavaScript to decrypt the cookie containing the data. This indicates a weakness in where price data is stored...

Unfixed XSS vulnerability at www.rukinky2.com

Security researcher BackDoor, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.rukinky2.com, which at the time of submission ranked 3524837 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Unfixed XSS vulnerability at www.rukinky2.com

Security researcher BackDoor, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.rukinky2.com, which at the time of submission ranked 2672679 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It is...

Unfixed XSS vulnerability at www.arzular29.com

Security researcher Narcoticxs, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting www.arzular29.com, which at the time of submission ranked 8490427 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is...

Unfixed XSS vulnerability at www.bn13.com

Security researcher BackDoor, has submitted on 10/09/2007 a cross-site-scripting XSS vulnerability affecting www.bn13.com, which at the time of submission ranked 388267 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed XSS vulnerability at www.iflr1000.com

Security researcher Stuarty, has submitted on 10/07/2007 a cross-site-scripting XSS vulnerability affecting www.iflr1000.com, which at the time of submission ranked 1241729 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/07/2007. It is...

HP-UX Security Patch : PHSS_32732

COM B.03.00.00 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26767; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

HP-UX Security Patch : PHSS_31078

COM B.03.00.00/COM B.03.00.01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26723; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

Unfixed XSS vulnerability at apache5.com

Security researcher kusomiso.com, has submitted on 30/09/2007 a cross-site-scripting XSS vulnerability affecting apache5.com, which at the time of submission ranked 668801 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is...

Unfixed Redirect vulnerability at paylas24.com

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting paylas24.com, which at the time of submission ranked 6569601 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. If...

Unfixed XSS vulnerability at www.genie.x0.com

Security researcher kusomiso.com, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www.genie.x0.com, which at the time of submission ranked 1250 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...