IBM OmniFind Cross Site Scripting / Privilege Escalation

============================================ ||| Security Advisory ||| ||| CVE-2010-3890 CVE candidate ||| ||| CVE-2010-3891 CVE candidate ||| ||| CVE-2010-3892 CVE candidate ||| ||| CVE-2010-3893 CVE candidate ||| ||| CVE-2010-3894 CVE candidate ||| ||| CVE-2010-3895 CVE candidate ||| |||...

IBM OmniFind Crawler - Denial of Service

Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site with dynamic parameter manipulation can cause an endless loop. This loop will block the crawler thread and use permanent server resources. Too many blocks can lead to a denial of service. The same site will be...

Metasploit Web Crawler

This auxiliary module is a modular web crawler, to be used in conjunction with wmap someday or standalone. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Web Crawler. Author: Efrain Torres et at metasploit.com 2010...

[Positive Technologies Research] Open Source WebEngine and Web Crawler v.0.2 is out!

============================================================== ============= Positive Technologies Research Lab ============= ============================================================== Open Source WebEngine and Web Crawler Beta ============================================================== --...

css-read.txt

?php / BEGIN LICENSE BLOCK CSSH - a proof of concept CSS based history crawler Copyright C 2008 Sirdarckcat This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of t...

Remote file inclusion

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

PHP Crawler 'footer.php'远程文件包含漏洞

BUGTRAQ ID: 31217 CNCAN ID：CNCAN-2008091803 PHP Crawler是一款基于PHP的WEB应用程序。 PHP Crawler不正确处理用户提交的输入，远程攻击者可以利用漏洞以WEB进程权限执行任意PHP代码。 问题是'footer.php'脚本对用户提交的'footerfile'参数缺少过滤，提交远程服务器上的任意文件作为包含文件，可导致以WEB进程权限执行任意PHP代码。 PHP-Crawler 0.8 目前没有解决方案提供： http://php-crawler.sourceforge.net/...

CVE-2008-4137

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

CVE-2008-4137

CVE-2008-4137 affects PHP-Crawler 0.8; vulnerability is a PHP remote file inclusion via the footer_file parameter, allowing remote code execution. CVSS v2 base score 7.5 (HIGH). Public exploits/advisories exist (e.g., Exploit-DB, SecurityFocus) per references. No remediation details provided in t...

CVE-2008-4137: Improper Input Validation

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

PHP Crawler 0.8 - Remote File Inclusion

PHP Crawler 0.8 - Remote File Inclusion Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs...

PHP Crawler 0.8 (footer) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ PHP Crawler 0.8 footer Remote File Inclusion Vulnerability ============================================================ Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability...

PHP Crawler 0.8 - Remote File Inclusion

Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researchers www.domlabs.org...

PHP Crawler 0.8 (footer) Remote File Inclusion Vulnerability

No description provided by source. Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs -...

phpcrawler-rfi.txt

Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researchers www.domlabs.org...

runcms-overwrite.txt

RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...

RunCMS <= 1.6 disclaimer.php Remote File Overwrite Exploit

Exploit for unknown platform in category web applications ========================================================== RunCMS RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px;...

RunCMS 1.6 - disclaimer.php Remote File Overwrite

RunCMS 1.6 - disclaimer.php Remote File Overwrite RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px;...

RunCMS 1.6 - 'disclaimer.php' Remote File Overwrite

RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...

Classic: Web2. 0 client components vulnerability scanning one-vulnerability warning-the black bar safety net

A, Web2. 0 is the several technology of integrated application of the results, these techniques are: AJAX（Asynchronous JavaScript and XML,Flash, JSONJavaScript Object Notation,SOAP Simple Object Access Protocol and REST, Representational State Transfer, etc. These techniques coupled with...