83 matches found
Invision Power Board (IP.Board) 3.3.4 - Unserialize Regex Bypass
Invision Power Board IP.Board 3.3.4 - Unserialize Regex Bypass ?php / So this is the patch that sanitizes, static public function safeUnserialize $serialized // unserialize will return false for object declared with small cap o // as well as if there is any ws between O and : if isstring...
Tiki Wiki CMS Groupware 'unserialize()' PHP代码执行漏洞
Bugtraq ID: 54298 CVE ID:CVE-2012-0911 Tiki Wiki CMS Groupware是一款内容管理和协作系统。 Tiki Wiki CMS Groupware多个脚本使用用户可控的输入调用"unserialize"，这可导致通过传递ad-hoc Zend Framework序列化对象来执行任意PHP代码。 0 Tiki Wiki CMS Groupware = 8.3 厂商补丁： Tiki Wiki ----- Tiki Wiki CMS Groupware 8.4已经修复此漏洞，建议用户下载使用：...
SugarCRM CE 6.3.1 PHP Code Execution
populateFromArrayunserializebase64decode$query; include/generic/Save2.php:197: $currentquerybypagearray = unserializebase64decode$currentquerybypage; include/MVC/Controller/SugarController.php:593: $REQUEST = unserializebase64decode$tempreq'currentquerybypage';...
SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution
Exploit for php platform in category web applications populateFromArrayunserializebase64decode$query; include/generic/Save2.php:197: $currentquerybypagearray = unserializebase64decode$currentquerybypage; include/MVC/Controller/SugarController.php:593: $REQUEST =...
appRain CMF Arbitrary PHP File Upload Vulnerability
Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
OpenConf <= 4.11 (author/edit.php) Remote Blind SQL Injection Exploit
Exploit for php platform in category web applications ?php / --------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Remote Blind SQL Injection Exploit --------------------------------------------------------------------- author...............: Egidio...
WebCalendar 1.2.4 Remote Code Execution
?php / ----------------------------------------------------------------------- WebCalendar = 1.2.4 install/index.php Remote Code Executionn Exploit ----------------------------------------------------------------------- author..........: Egidio Romano aka EgiX mail............:...
WebCalendar 1.2.4 - Remote Code Execution
WebCalendar 1.2.4 - Remote Code Execution ?php / ----------------------------------------------------------------------- WebCalendar = 1.2.4 install/index.php Remote Code Executionn Exploit ----------------------------------------------------------------------- author..........: Egidio Romano aka...
phpFox <= 3.0.1 (ajax.php) Remote Command Execution Exploit
Exploit for php platform in category web applications ?php / ----------------------------------------------------------- phpFox = 3.0.1 ajax.php Remote Command Execution Exploit ----------------------------------------------------------- author.............: Egidio Romano aka EgiX...
PHPFox 3.0.1 - ajax.php Remote Command Execution
PHPFox 3.0.1 - ajax.php Remote Command Execution ?php / ----------------------------------------------------------- phpFox = 3.0.1 ajax.php Remote Command Execution Exploit ----------------------------------------------------------- author.............: Egidio Romano aka EgiX mail...............:...
appRain CMF <= 0.1.5 (uploadify.php) Unrestricted File Upload Exploit
Exploit for php platform in category web applications ?php / --------------------------------------------------------------------- appRain CMF = 0.1.5 uploadify.php Unrestricted File Upload Exploit --------------------------------------------------------------------- author............: Egidio...
appRain CMF 0.1.5 - Uploadify.php Unrestricted Arbitrary File Upload
appRain CMF 0.1.5 - Uploadify.php Unrestricted Arbitrary File Upload ?php / --------------------------------------------------------------------- appRain CMF = 0.1.5 uploadify.php Unrestricted File Upload Exploit ---------------------------------------------------------------------...
Tiki Wiki CMS Groupware 8.2 - 'snarf_ajax.php' Remote PHP Code Injection
------------------------------------------------------------------------- Tiki Wiki CMS Groupware /tiki-8.2/snarfajax.php?url=1®exres=phpinfo®ex=//e%00/ Tiki internal filters remove all null bytes from user input, but for some strange reason this doesn't happen within admin sessions. So,...
Traq <= 2.3 Authentication Bypass / Remote Code Execution
Exploit for php platform in category web applications group'isadmin' 32. header"Location: login.php"; 33. This function is called in each script located into /admicp/ directory to make sure the user has admin rights, but this is a broken authorization schema due to the header function doesn't sto...
Log1 CMS 2.0 - ajax_create_folder.php Remote Code Execution
Log1 CMS 2.0 - ajaxcreatefolder.php Remote Code Execution ?php / +-----------------------------------------------------------+ + Log1CMS 2.0ajaxcreatefolder.php Remote Code Execution + +-----------------------------------------------------------+ Web-App : Log1CMS 2.0 Vendor :...
Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution
?php / +-----------------------------------------------------------+ + Log1CMS 2.0ajaxcreatefolder.php Remote Code Execution + +-----------------------------------------------------------+ Web-App : Log1CMS 2.0 Vendor : http://log1cms.sourceforge.net/ Vulnerability : Remote Code Execution Author ...
PmWiki 2.2.34 - 'pagelist' Remote PHP Code Injection (1)
$r 454. if @$PageListSortCmp$o 455. $code .= "$c = $PageListSortCmp$o; "; 456. else 457. $code .= "$c = @strcasecmp$PCache$x'$o',$PCache$y'$o'; "; 458. $code .= "if $c return $r$c;\n"; 459. 460. StopWatch'PageListSort sort'; 461. if $code 462. uasort$list, 463. createfunction'$x,$y',...
PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Exploit
Exploit for php platform in category web applications $r 454. if @$PageListSortCmp$o 455. $code .= "$c = $PageListSortCmp$o; "; 456. else 457. $code .= "$c = @strcasecmp$PCache$x'$o',$PCache$y'$o'; "; 458. $code .= "if $c return $r$c;\n"; 459. 460. StopWatch'PageListSort sort'; 461. if...
Wordpress Zingiri Web Shop Plugin <= 2.2.3 Remote Code Execution Vulnerability
Wordpress Zingiri Web Shop Plugin = 2.2.3 Remote Code Execution Vulnerability author...............: Egidio Romano aka EgiX mail.................: n0b0d13satgmaildotcom software link........: http://wordpress.org/extend/plugins/zingiri-web-shop/ affected versions....: from 0.9.12 to 2.2.3 -...
FreeWebShop 2.2.9 R2 Remote Code Execution
get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45. $selectedDocuments$key = $POST'value'; 46. $sessionAction-set$selectedDocuments; 47. 48. 49. echo...