347 matches found
DotClear Full Path Disclosure Vulnerability
I have contacted the developers 2 weeks ago, still no answer... Vendor: DotClear Vulnerable: DotClear 1.2.5 and below Release Date: 2007-01-28 Full Path Disclosure This vulnerability affects: http://www.example.com/dotclear/themes/default/form.php...
CVE-2006-3938
DotClear allows remote attackers to obtain sensitive information via a direct request for 1 editcat.php, 2 index.php, 3 editlink.php in ecrire/tools/blogroll/; 4 syslog/index.php, 5 thememng/index.php, 6 toolsmng/index.php, 7 utf8convert/index.php in /ecrire/tools/; 8 /ecrire/inc/connexion.php an...
CVE-2006-3938
CVE-2006-3938 affects DotClear. The vulnerability allows remote attackers to obtain sensitive information by directly requesting multiple files (e.g., edit_cat.php, syslog/index.php, class.blog.php, template.php) under /ecrire/tools/, /inc/, /layout/, and /themes/default/. The root cause is that ...
CVE-2006-3938
DotClear allows remote attackers to obtain sensitive information via a direct request for 1 editcat.php, 2 index.php, 3 editlink.php in ecrire/tools/blogroll/; 4 syslog/index.php, 5 thememng/index.php, 6 toolsmng/index.php, 7 utf8convert/index.php in /ecrire/tools/; 8 /ecrire/inc/connexion.php an...
CVE-2006-3938: Undefined Security Weakness
DotClear allows remote attackers to obtain sensitive information via a direct request for 1 editcat.php, 2 index.php, 3 editlink.php in ecrire/tools/blogroll/; 4 syslog/index.php, 5 thememng/index.php, 6 toolsmng/index.php, 7 utf8convert/index.php in /ecrire/tools/; 8 /ecrire/inc/connexion.php an...
DotClear : Multiples Full Path Disclosure
DotClear : Multiples Full Path Disclosure Discovred By Silitix - Silitixgmailcom www.Silitix.com A remote user can access the files directly to cause the system to display an error message that indicates the full path of the server. /ecrire/tools/blogroll/editcat.php...
CVE-2006-2866
PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a FTP URL in the blogdcpath parameter, which passes fileexists and isdir tests on PHP 5...
Remote file inclusion
PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a FTP URL in the blogdcpath parameter, which passes fileexists and isdir tests on PHP 5...
CVE-2006-2866
PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a FTP URL in the blogdcpath parameter, which passes fileexists and isdir tests on PHP 5...
CVE-2006-2866
CVE-2006-2866 describes a PHP remote file inclusion vulnerability in DotClear
CVE-2006-2866: Undefined Security Weakness
PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a FTP URL in the blogdcpath parameter, which passes fileexists and isdir tests on PHP 5...
dotclear_124_php5_xpl.txt
!/usr/bin/php -q -d shortopentag=on ? echo "DotClear = 1.2.4 prepend.php/'blogdcpath' arbitrary remote inclusion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: "propulsé par DotClear" "fil atom" "fil rss" +commentaires\r\n\r\n"; /...
DotClear 1.2.4 - prepend.php Remote File Inclusion
DotClear 1.2.4 - prepend.php Remote File Inclusion !/usr/bin/php -q -d shortopentag=on ? echo "DotClear = 1.2.4 prepend.php/'blogdcpath' arbitrary remote inclusion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: "propulsé par DotClear"...
DotClear <= 1.2.4 (prepend.php) Arbitrary Remote Inclusion Exploit
Exploit for unknown platform in category web applications ================================================================== DotClear = 1.2.4 prepend.php Arbitrary Remote Inclusion Exploit ================================================================== !/usr/bin/php -q -d shortopentag=on ? ech...
DotClear 1.2.4 - 'prepend.php' Remote File Inclusion
!/usr/bin/php -q -d shortopentag=on ? echo "DotClear = 1.2.4 prepend.php/'blogdcpath' arbitrary remote inclusion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: "propulsé par DotClear" "fil atom" "fil rss" +commentaires\r\n\r\n"; /...
DotClear <= 1.2.4 (prepend.php) Arbitrary Remote Inclusion Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "DotClear = 1.2.4 prepend.php/'blogdcpath' arbitrary remote inclusion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: "propulsé par DotClear" "fil atom"...
CVE-2005-3963
SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dcxd parameter in a cookie...
CVE-2005-3963: Undefined Security Weakness
SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dcxd parameter in a cookie...
CVE-2005-3963
SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dcxd parameter in a cookie...
CVE-2005-3963
DotClear contains an SQL injection vulnerability in session.php (pre-1.2.3) exploitable via the dc_xd cookie, allowing remote attackers to execute arbitrary SQL. Impact is information disclosure/modification and potential server compromise as described in the CVE records. The connected documents ...