EUVD-2005-1951

Malware in sbrugna...

EUVD-2005-2560

Malware in sbrugna...

EUVD-2005-1968

Malware in sbrugna...

CVE-2005-2559

doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via 1 shell metacharacters in the epingcount parameter or 2 restricted shell metacharacters such as "" and "&" in the epinghost parameter, which is not handled by the...

CVE-2005-2559

CVE-2005-2559 affects the e107 web portal’s ePing plugin (versions 1.02 and earlier). The vulnerability arises from improper handling/validation of the eping_count and eping_host parameters in doping.php, allowing shell metacharacters to be injected and used in system() calls. Consequence: remote...

eping.txt

www.RedC0de.org found the following error in eping: Details ------- Advisory name: Arbitrary code execution in eping plugin Advisory number: 1 Application: eping Aplication author: apnovi3 Security-Risk: high - very high Remote-Exploit: Yes Discovered by: m00fd1 aka Tr|p Introduction ------------...

CVE-2005-1949

The epingvalidaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the epinghost parameter...

CVE-2005-1949

The epingvalidaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the epinghost parameter...

CVE-2005-1966

The eTracevalidaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etracehost parameter...

CVE-2005-1949

The CVE-2005-1949 entry refers to the ePing plugin for the e107 portal, where the eping_validaddr function in functions.php allows remote attackers to execute arbitrary commands via shell metacharacters after a valid eping_host argument. Exploitation details are described in the PT-2005-2900 and ...

CVE-2005-1966

The CVE-2005-1966 issue affects the e107 content portal via the eTrace plugin: the eTrace_validaddr function allows remote attackers to run arbitrary commands by injecting shell metacharacters after a valid etrace_host argument. The NASL plug-in also describes a DOTRACE path where etrace_cmd/etra...

PT-2005-2900 · E107 · Eping Plugin

Name of the Vulnerable Software and Affected Versions: ePing plugin for e107 portal affected versions not specified Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping host parameter in the eping validaddr...

CVE-2005-1966

The eTracevalidaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etracehost parameter...

Arbitrary code execution in eping plugin

www.RedC0de.org found the following error in eping: Details ------- Advisory name: Arbitrary code execution in eping plugin Advisory number: 1 Application: eping Aplication author: apnovi3 Security-Risk: high - very high Remote-Exploit: Yes Discovered by: m00fd1 aka Tr|p Introduction ------------...