Remote Code Execution

spoon/library is vulnerable to remote code execution. Lack of validation of the cookie allows a remote attacker to submit a cookie containing malicious executable objects that will execute upon deserialization in the wakeup magic method in spoon/cookie/cookie.php...

Piwik 0.4.5 /core/cookie.php 命令执行漏洞

No description provided by source...

freepost 0.1 r1 - Multiple Vulnerabilities

Exploit FreePost 0.1 R1 SQL Injection Date: June 6nd 2012 Author: ThE g0bL!N Version: 0.1 R1 Vendor Url: http://www.phpbrasil.com/script/dYRoLbwWuzR/freepost-01-r1 Tested on: Xp Service Pack 2 Greets To : Lider Pirata , Yassine Tablouche , Ilyes , Bilal , Habib, Djamal , Boukhors .. etc Exploit:...

CVE-2011-0400

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Session fixation

Cookie.php in Piwik before 1.1 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2011-0400

CVE-2011-0400 affects Piwik prior to 1.1. Cookie.php fails to set the secure flag on the session cookie in HTTPS sessions, enabling potential interception of the session cookie over HTTP. This is the nature and impact as described; no remediation details are provided in the referenced documents.

discuz 5.0.0 Cookie.php 跨站脚本漏洞

No description provided by source...

Code injection

The loadContentFromCookie function in core/Cookie.php in Piwik before 0.5 does not validate strings obtained from cookies before calling the unserialize function, which allows remote attackers to execute arbitrary code or upload arbitrary files via vectors related to the destruct function in the...

piwik -- php code execution

secunia reports: Stefan Esser has reported a vulnerability in Piwik, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to the core/Cookie.php script using "unserialize" with user controlled input. This can be exploited to e.g. execute...

Elgg Cross Site Scripting / Request Forgery

CMS Elgg uploading to a host.Save as cookie.php +Exploit: ------- 1 Register in The SIte 2 add to the Template The victim would be anyone who comes to your blog. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++...