52 matches found
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITEBASE parameter to 1 browser.php, 2 imageeditor.php and 3 skinchooser.php in configuration/. NOTE: the provenance of this information is...
CVE-2008-6196
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITEBASE parameter to 1 browser.php, 2 imageeditor.php and 3 skinchooser.php in configuration/. NOTE: the provenance of this information is...
CVE-2008-6196
Multiple PHP remote file inclusion vulnerabilities affect Philippe CROCHAT EasySite 2.0, allowing an attacker to execute arbitrary PHP code via a URL parameter (EASYSITE_BASE) passed to configuration/. scripts browser.php, image_editor.php, and skin_chooser.php. Underlying issue: remote file incl...
CVE-2008-6196: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITEBASE parameter to 1 browser.php, 2 imageeditor.php and 3 skinchooser.php in configuration/. NOTE: the provenance of this information is...
CVE-2008-6196
Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITEBASE parameter to 1 browser.php, 2 imageeditor.php and 3 skinchooser.php in configuration/. NOTE: the provenance of this information is...
CVE-2008-4155
Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...
Directory traversal
Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...
CVE-2008-4155
CVE-2008-4155 affects EasySite 2.3 with multiple directory traversal vulnerabilities. The issue allows remote attackers to read arbitrary files or list directories by supplying a .. payload in specific parameters across several PHP scripts: (a) www/index.php (module or action), (b) modules/Module...
CVE-2008-4155
Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...
CVE-2008-4155: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...
EasySite 2.3 Multiple Remote Vulnerabilities
No description provided by source. + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion...
easysite-lfi.txt
EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion http://localhost/www/index.php?module=Accueil&action=../../../../autoexec.bat%00...
EasySite 2.3 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ============================================ EasySite 2.3 Multiple Remote Vulnerabilities ============================================ + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + Local File Inclusion...
easysite 2.3 - Multiple Vulnerabilities
easysite 2.3 - Multiple Vulnerabilities + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion...
EasySite 2.0 - browser.php Remote File Inclusion
EasySite 2.0 - browser.php Remote File Inclusion source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
EasySite 2.0 - 'skin_chooser.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...
EasySite 2.0 - image_editor.php Remote File Inclusion
EasySite 2.0 - imageeditor.php Remote File Inclusion source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
EasySite 2.0 - skin_chooser.php Remote File Inclusion
EasySite 2.0 - skinchooser.php Remote File Inclusion source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
EasySite 2.0 - 'browser.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...
EasySite 2.0 - 'image_editor.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...