Lucene search
K

245 matches found

0day.today
0day.today
added 2010/03/17 12:0 a.m.13 views

eFront 'langname' Parameter Local File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ eFront 'langname' Parameter Local File Include Vulnerability ============================================================ Vulnerable: eFront eFront 3.5.5 Not Vulnerable: eFront...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2010/03/17 12:0 a.m.38 views

Core Security Technologies Advisory 2010.0311

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ eFront-learning PHP file inclusion vulnerability 1. Advisory Information Title: eFront-learning PHP file inclusion vulnerability Advisory Id: CORE-2010-0311 Advisory...

0.7AI score
Exploits0
Core Security
Core Security
added 2010/03/16 12:0 a.m.62 views

eFront-learning PHP file inclusion vulnerability

1. Advisory Information Title: eFront-learning PHP file inclusion vulnerability Advisory Id: CORE-2010-0311 Advisory URL:http://www.coresecurity.com/core-labs/advisories/efront-php-file-inclusion Date published: 2010-03-16 Date of last update: 2010-03-16 Vendors contacted: Vendor name Release...

7.9AI score
Exploits0
OpenVAS
OpenVAS
added 2009/10/31 12:0 a.m.9 views

eFront Version Detection

This script detects the installed Efront version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8AI score
Exploits0
OpenVAS
OpenVAS
added 2009/10/31 12:0 a.m.21 views

eFront <= 3.5.4 'database.php' RFI Vulnerability

eFront is prone to a remote file inclusion RFI vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.8CVSS7AI score0.02016EPSS
Exploits1References4
NVD
NVD
added 2009/10/11 10:30 p.m.10 views

CVE-2009-3660

PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: this is only a vulnerability when the administrator does not follow...

6.8CVSS7.6AI score0.02016EPSS
Exploits1References3
Prion
Prion
added 2009/10/11 10:30 p.m.13 views

Remote file inclusion

PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: this is only a vulnerability when the administrator does not follow...

6.8CVSS8AI score0.02016EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2009/10/11 10:0 p.m.14 views

CVE-2009-3660

PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: this is only a vulnerability when the administrator does not follow...

7.6AI score0.02016EPSS
Exploits1References3
CVE
CVE
added 2009/10/11 10:0 p.m.50 views

CVE-2009-3660

The CVE-2009-3660 issue affects Efront up to version 3.5.4 in the PHP library libraries/database.php. The root cause is a remote file inclusion (RFI) vulnerability when register_globals is enabled, allowing a remote attacker to execute arbitrary PHP code via a URL supplied in the path parameter. ...

6.8CVSS7.6AI score0.02016EPSS
Exploits1References3Affected Software1
Packet Storm
Packet Storm
added 2009/09/16 12:0 a.m.24 views

efront 3.5.4 Remote File Inclusion

efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15 requireonce$path.'adodb/adodb.inc.php'; 3xplo!t :...

Exploits0
0day.today
0day.today
added 2009/09/15 12:0 a.m.34 views

efront <= 3.5.4 (database.php path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= efront = 3.5.4 database.php path Remote File Inclusion Vulnerability ======================================================================= efront = 3.5.4 Remote File...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2009/09/15 12:0 a.m.43 views

efront 3.5.4 - &#039;database.php?path&#039; Remote File Inclusion

efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15 requireonce$path.'adodb/adodb.inc.php'; 3xplo!t :...

7.4AI score
Exploits0
seebug.org
seebug.org
added 2009/09/15 12:0 a.m.15 views

efront &lt;= 3.5.4 (database.php path) Remote File Inclusion Vulnerability

No description provided by source. efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2009/09/15 12:0 a.m.21 views

efront 3.5.4 - database.php?path Remote File Inclusion

efront 3.5.4 - database.php?path Remote File Inclusion efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15...

0.3AI score
Exploits0
NVD
NVD
added 2009/08/21 2:30 p.m.13 views

CVE-2008-7026

Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in 1 student/avatars/ or 2...

6.8CVSS7.7AI score0.10367EPSS
Exploits0References6
Prion
Prion
added 2009/08/21 2:30 p.m.16 views

Unrestricted file upload

Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in 1 student/avatars/ or 2...

6.8CVSS8.3AI score0.10367EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2009/08/21 2:0 p.m.17 views

CVE-2008-7026

Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in 1 student/avatars/ or 2...

7.7AI score0.10367EPSS
Exploits0References6
CVE
CVE
added 2009/08/21 2:0 p.m.40 views

CVE-2008-7026

CVE-2008-7026 describes an unrestricted file-upload vulnerability in eFront (version 3.5.1 build 2710 and earlier) where an attacker can upload a file with an executable extension as a user avatar via the filesystem3.class.php upload process, and then access it through a direct request to the fil...

6.8CVSS8AI score0.10367EPSS
Exploits0References6Affected Software1
securityvulns
securityvulns
added 2008/10/02 12:0 a.m.103 views

Remote File Inclusion Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront = 3.5.1 / build 2710: Remote File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: eFront $ File affected: studentpage.php / professorpage $ Version: 3.5.1 / build 2710 $...

7.4AI score
Exploits0
seebug.org
seebug.org
added 2008/10/01 12:0 a.m.16 views

eFront &lt;= 3.5.1 / build 2710 Remote Arbitrary Upload Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront = 3.5.1 / build 2710: Remote File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: eFront $ File affected: studentpage.php / professorpag...

7.1AI score
Exploits0
Rows per page
Query Builder