45 matches found
WordPress Slideshow Gallery 2 Cross SIte Scripting
Exploit Title: Wordpress Slideshow Gallery 2 Cross Site Scripting Exploit Date: 26 January 2011 Author: Bret Hawk Software Link: http://wordpress.org/extend/plugins/slideshow-gallery-2/ Version: 2xxx and Prior Tested on: Linux Unix The Wordpress slideshow Gallery2 plugin suffers cross site...
PT-2011-4658
Name of the Vulnerable Software and Affected Versions Phorum version 5.2.15a Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as css.php, which reveals the installation path in an error...
CVE-2011-3768: Exposure of Sensitive Information to an Unauthorized Actor
Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files...
CVE-2008-6265: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...
Cyberfolio <= 7.12.2 (css.php theme) Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Cyberfolio = 7.12.2 Local File Inclusion Vulnerability Script site: http://cyberfolio.org/...
Cyberfolio <= 7.12.2 (css.php theme) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Cyberfolio = 7.12.2 css.php theme Local File Inclusion Vulnerability ======================================================================= :::::::-. ... ::::::. :::...
Cyberfolio 7.12.2 - theme Local File Inclusion
Cyberfolio 7.12.2 - theme Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Cyberfolio = 7.12.2 Local File Inclusion Vulnerability Script site:...
Directory traversal
Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 ewikiid and 2 ewikiaction parameters to fragments/css.php, and possibly the 3 id parameter ...
CVE-2008-2672
Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 ewikiid and 2 ewikiaction parameters to fragments/css.php, and possibly the 3 id parameter ...
CVE-2008-2672: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 ewikiid and 2 ewikiaction parameters to fragments/css.php, and possibly the 3 id parameter ...
erfurtwiki-lfi.txt
/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: ErfurtWiki = R1.02b css Local...
ErfurtWiki R1.02b - Local File Inclusion
ErfurtWiki R1.02b - Local File Inclusion / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title...
ErfurtWiki R1.02b - Local File Inclusion
/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: ErfurtWiki = R1.02b css Local...
Remote file inclusion
PHP remote file inclusion vulnerability in cforms-css.php in Oliver Seidel cforms contactforms, a Wordpress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the tm parameter. NOTE: CVE disputes this issue for 7.3, since there is no tm parameter, and the code exits with a...
CVE-2008-0560
CVE-2008-0560 affects the WordPress plugin cforms (Oliver Seidel cforms, also known as contactforms). The vulnerability is in cforms-css.php and allows remote attackers to execute arbitrary PHP code via a URL parameter tm, due to a PHP remote file inclusion. Several sources note that version 7.3 ...
WordPress Contact Form Plugin <= 7.3 - Remote File Inclusion
Because of this vulnerability in cforms-css.php, the attackers can execute arbitrary PHP code via a URL in the "tm" parameter. Solution Update the plugin...
CVE-2008-0560: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in cforms-css.php in Oliver Seidel cforms contactforms, a Wordpress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the tm parameter. NOTE: CVE disputes this issue for 7.3, since there is no tm parameter, and the code exits with a...
PT-2008-2186 · Oliver Seidel · Cforms
Name of the Vulnerable Software and Affected Versions: cforms contactforms versions prior to 7.3 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the tm parameter in the cforms-css.php file. This is a PHP remote file inclusion vulnerability in the Oliver...
