CVE-2008-6196

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITEBASE parameter to 1 browser.php, 2 imageeditor.php and 3 skinchooser.php in configuration/. NOTE: the provenance of this information is...

CVE-2008-6196

Multiple PHP remote file inclusion vulnerabilities affect Philippe CROCHAT EasySite 2.0, allowing an attacker to execute arbitrary PHP code via a URL parameter (EASYSITE_BASE) passed to configuration/. scripts browser.php, image_editor.php, and skin_chooser.php. Underlying issue: remote file incl...

CVE-2008-4155

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...

CVE-2008-4155

CVE-2008-4155 affects EasySite 2.3 with multiple directory traversal vulnerabilities. The issue allows remote attackers to read arbitrary files or list directories by supplying a .. payload in specific parameters across several PHP scripts: (a) www/index.php (module or action), (b) modules/Module...

Directory traversal

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...

CVE-2008-4155

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...

EasySite 2.3 Multiple Remote Vulnerabilities

No description provided by source. + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion...

easysite-lfi.txt

EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion http://localhost/www/index.php?module=Accueil&action=../../../../autoexec.bat%00...

EasySite 2.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================ EasySite 2.3 Multiple Remote Vulnerabilities ============================================ + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + Local File Inclusion...

easysite 2.3 - Multiple Vulnerabilities

easysite 2.3 - Multiple Vulnerabilities + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion...

EasySite 2.0 - 'skin_chooser.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

EasySite 2.0 - 'image_editor.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

EasySite 2.0 - browser.php Remote File Inclusion

EasySite 2.0 - browser.php Remote File Inclusion source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

EasySite 2.0 - 'browser.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

EasySite 2.0 - image_editor.php Remote File Inclusion

EasySite 2.0 - imageeditor.php Remote File Inclusion source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

EasySite 2.0 - skin_chooser.php Remote File Inclusion

EasySite 2.0 - skinchooser.php Remote File Inclusion source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

AlberT-EasySite PSA_PATH远程文件包含漏洞

AlberT-EasySite是一款基于PHP的站点生成系统。 AlberT-EasySite在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 AlberT-EasySite没有正确地验证AES/modules/auth/phpsecurityadmin/include/logout.php文件中对PSAPATH参数的输入，允许攻击者通过包含本地或外部资源执行任意PHP代码。成功攻击要求打开了registerglobals。 AlberT AlberT-EasySite 1.0 AlberT AlberT-EasySite 0.8.12...

AlberT-EasySite-1.0.a5.txt

AlberT-EasySite = 1.0.a5 Remote File Inclusion Download Source : http://www.superalbert.it/download/AlberT-EasySite/AES1.0a5.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; logout.php bugs ; requireonce $PSAPATH.'/include/config.php'; exmple and methode...

AlberT-EasySite <= 1.0.a5 Remote File Inclusion

AlberT-EasySite = 1.0.a5 Remote File Inclusion Download Source : http://www.superalbert.it/download/AlberT-EasySite/AES1.0a5.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; logout.php bugs ; requireonce $PSAPATH.'/include/config.php'; exmple and methode...

CVE-2006-4426

PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite AES 1.0a5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSAPATH parameter...