EUVD-2007-0352

Malware in sbrugna...

EUVD-2008-0818

Malware in sbrugna...

CVE-2011-2195

A flaw was found in WebSVN 2.3.2. Without prior authentication, if the 'allowDownload' option is enabled in config.php, an attacker can invoke the dl.php script and pass a well formed 'path' argument to execute arbitrary commands against the underlying operating system...

websvn 操作系统命令注入漏洞

websvn is a software application. An online Subversion repository viewer. An operating system command injection vulnerability exists in WebSVN. The vulnerability stems from a flaw found in WebSVN 2.3.2. Without prior authentication, if the "allowDownload" option is enabled in config.php, an...

zzcms Product version \dl\dl.php the parameter b SQL injection

No description provided by source...

WebSVN 2.3.2 - Unproper Metacharacters Escaping exec() Remote Command Injection

WebSVN 2.3.2 - Unproper Metacharacters Escaping exec Remote Command Injection WebSVN 2.3.2 Unproper Metacharacters Escaping exec Remote Commands Injection Vulnerability tested against: Microsoft Windows Server R2 SP2 PHP 5.3.6 VC9 with magicquotesgpc = off default Apache 2.2.17 VC9 Introduction:...

Sql injection

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via 1 the kid parameter to a mod/dl.php or b mod/links.php, and 2 the query parameter to search.php...

auracms162-sql.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/ ------------------------------------ Audit Oleh : NTOS-Team Loka...

AuraCMS 1.62 - Multiple SQL Injections

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/ ------------------------------------ Audit Oleh : NTOS-Team Loka...

FireConfig 0.5 (dl.php file) Remote File Disclosure Vulnerability

No description provided by source. FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 sebug.net...

fireconfig-lfi.txt

FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00...

FireConfig 0.5 - dl.php Remote File Disclosure

FireConfig 0.5 - dl.php Remote File Disclosure FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 milw0rm.com 2007-10-28...

FireConfig 0.5 - 'dl.php' Remote File Disclosure

FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 milw0rm.com 2007-10-28...

FireConfig 0.5 (dl.php file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= FireConfig 0.5 dl.php file Remote File Disclosure Vulnerability ================================================================= FireConfig v0.5 dl.php file Remote File...

Sql injection

Multiple SQL injection vulnerabilities in a index.php and b dl.php in SmE FileMailer 1.21 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ps, 2 us, 3 f, or 4 code parameter. NOTE: the us vector in index.php is already covered by CVE-2007-0346...

CVE-2007-0350

CVE-2007-0350 describes multiple SQL injection vulnerabilities in SmE FileMailer 1.21 and earlier, affecting index.php and dl.php. The flaw allows remote attackers to inject SQL via the (1) ps, (2) us, (3) f, or (4) code parameters, with the us parameter in index.php already covered by CVE-2007-0...