Web Server Creator 0.1 - l Remote File Inclusion

Web Server Creator 0.1 - l Remote File Inclusion Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote cont@ct: x0r0nathotmaildotcom Code: include $l; Exploit:...

Web Server Creator v0.1 (l) Remote Include Vulnerability

Exploit for unknown platform in category web applications ======================================================== Web Server Creator v0.1 l Remote Include Vulnerability ======================================================== Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON...

BlogHoster v2.2 Post Comment Html Injection

HeLiOsZ - Dark End Team - Internet Security Team BlogHoster v2.2 Post Comment Html Injection IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.blogsplosion.com Exploit: - To exploit this issue you must put your...

CVE-2005-1755

PHP remote file inclusion vulnerability in pollvote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativerpfad parameter...

CVE-2005-1755

The CVE-2005-1755 entry concerns PHP Poll Creator (version 1.01) where PHP remote file inclusion is possible through the relativer_pfad parameter in poll_vote.php. The underlying issue is arbitrary PHP code execution via a manipulated relative path, as described in the NVD entry for poll_vote.php...

Input validation

Unspecified vulnerability in VCEngine.php in v-creator before 1.3-pre3, when the VCCRYPTOMETHOD option is OPENSSL, allows remote attackers to execute arbitrary commands, possibly due to problems in the 1 encrypt and 2 decrypt functions...

CVE-2006-1599

Unspecified vulnerability in VCEngine.php in v-creator before 1.3-pre3, when the VCCRYPTOMETHOD option is OPENSSL, allows remote attackers to execute arbitrary commands, possibly due to problems in the 1 encrypt and 2 decrypt functions...

CVE-2006-1599

Vulnerability CVE-2006-1599 affects v-creator before 1.3-pre3, in VCEngine.php when VC_CRYPTO_METHOD is OPENSSL. Root cause appears to be issues in the encrypt and decrypt functions, enabling remote command execution. The available sources indicate the vulnerability resides in the crypto handling...

[SA19453] v-creator VCEngine.php Shell Command Injection Vulnerability

TITLE: v-creator VCEngine.php Shell Command Injection Vulnerability SECUNIA ADVISORY ID: SA19453 VERIFY ADVISORY: http://secunia.com/advisories/19453/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: v-creator 1.x http://secunia.com/product/9080/ DESCRIPTION: A...

CVE-2005-1755

PHP remote file inclusion vulnerability in pollvote.php in PHP Poll Creator 1.01 allows remote attackers to execute arbitrary PHP code via the relativerpfad parameter...

CVE-2005-3917

SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2005-3917

The CVE-2005-3917 entry affects CommodityRentals 2.0 Online Rental Business Creator script. It is a SQL injection vulnerability in the usersession function exploitable via the user_id parameter, enabling remote execution of arbitrary SQL commands. Impact per CVSS: Confidentiality/Integrity/Availa...

phpPoll.txt

svadvisory6 -------------------------------------------------------------+ Title: PHP Injection in PHP Poll Creator | Software: PHP Poll Creator v 1.01 | Homepage: http://www.phppc.de +------------+ Finder: rash | 24.05.05 | -------------------------------------------------------------+ Descripti...

PHP Injection in PHP Poll Creator

svadvisory6 -------------------------------------------------------------+ Title: PHP Injection in PHP Poll Creator | Software: PHP Poll Creator v 1.01 | Homepage: http://www.phppc.de +------------+ Finder: rash | 24.05.05 | -------------------------------------------------------------+ Descripti...

PHP Poll Creator 1.0.1 - Poll_Vote.php Remote File Inclusion

PHP Poll Creator 1.0.1 - PollVote.php Remote File Inclusion source: https://www.securityfocus.com/bid/13760/info PHP Poll Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...

PHP Poll Creator 1.0.1 - 'Poll_Vote.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/13760/info PHP Poll Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer...

CVE-2002-1427

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...

CVE-2002-1427

The printhtmltofile function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users...

CVE-2002-1427

The CVE-2002-1427 entry affects Easy Homepage Creator 1.0. The print_html_to_file function in edit.cgi does not validate user credentials, enabling remote attackers to modify other users’ home pages. CVSS v2 data reports a base score of 7.5 ( HIGH ) with network attack vector, no authentication, ...

CVE-2002-2217

Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal WSC-WebPortal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 l parameter to customize.php or the 2 pg parameter to index.php...