83 matches found
FreeWebshop <= 2.2.9 R2 (ajax_save_name.php) Remote Code Execution
Exploit for php platform in category web applications get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45. $selectedDocuments$key = $POST'value';...
WordPress Zingiri 2.2.3 Code Execution
get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45. $selectedDocuments$key = $POST'value'; 46. $sessionAction-set$selectedDocuments; 47. 48. 49. echo...
ZenPhoto 1.4.1.4 - ajax_create_folder.php Remote Code Execution
ZenPhoto 1.4.1.4 - ajaxcreatefolder.php Remote Code Execution ?php / -------------------------------------------------------------------------- Zenphoto = 1.4.1.4 ajaxcreatefolder.php Remote Code Execution Exploit --------------------------------------------------------------------------...
aidiCMS 3.55 - ajax_create_folder.php Remote Code Execution
aidiCMS 3.55 - ajaxcreatefolder.php Remote Code Execution ?php / -------------------------------------------------------------------- aidiCMS v3.55 ajaxcreatefolder.php Remote Code Execution Exploit -------------------------------------------------------------------- author............: Egidio...
ZenPhoto 1.4.1.4 - 'ajax_create_folder.php' Remote Code Execution
?php / -------------------------------------------------------------------------- Zenphoto = 1.4.1.4 ajaxcreatefolder.php Remote Code Execution Exploit -------------------------------------------------------------------------- author............: Egidio Romano aka EgiX mail..............:...
Ajax File And Image Manager 1.0 Final Code Execution
-------------------------------------------------------------------------- Ajax File and Image Manager v1.0 Final Remote Code Execution Vulnerability -------------------------------------------------------------------------- author...........: Egidio Romano aka EgiX mail.............:...
phpMyFAQ <= 2.7.0 (ajax_create_folder.php) Remote Code Execution
Exploit for php platform in category web applications ?php / ------------------------------------------------------------------------ phpMyFAQ = 2.7.0 ajaxcreatefolder.php Remote Code Execution Exploit ------------------------------------------------------------------------ author............:...
phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection
Exploit for php platform in category web applications ?php / ------------------------------------------------------------------------ phpLDAPadmin = 1.2.1.1 queryengine Remote PHP Code Injection Exploit ------------------------------------------------------------------------ author..................
JAKCMS PRO <= 2.2.5 remote arbitrary file upload vulnerability and fix-vulnerability warning-the black bar safety net
Title: JAKCMS PRO = 2.2.5 Remote Arbitrary File Upload Exploit Author: EgiX Download address: http://www.jakcms.com/ Impact version n: 2.2.5 Test platform: Windows 7 and Debian 6.0.2 ? php / -------------------------------------------------------- JAKCMS PRO = 2.2.5 Remote Arbitrary File Upload...
JAKCMS PRO <= 2.2.5 Remote Arbitrary File Upload Exploit
Exploit for php platform in category web applications Exploit Title: JAKCMS PRO = 2.2.5 Remote Arbitrary File Upload Exploit Google Dork: "Powered By JAKCMS" Date: 21/09/2011 Author: EgiX Software Link: http://www.jakcms.com/ Version: 2.2.5 Tested on: Windows 7 and Debian 6.0.2 ?php /...
RoSPORA 1.5.0 - Remote PHP Code Injection
'; 671. $link=$SERVER'PHPSELF'."?f=".$flag."&s="; 672. 673. if !empty$plarray 674. 675. usort$plarray, createfunction'$a, $b', 'if $a'.$sort.' == $b'.$sort.' return 0; if $a'.$sort.' '.$sorttype.' $b'.$sort.' return -1; return 1;'; 676. Input parameter passed through $GET's' isn't properly...
RoSPORA 1.5.0 - Remote PHP Code Injection
RoSPORA 1.5.0 - Remote PHP Code Injection '; 671. $link=$SERVER'PHPSELF'."?f=".$flag."&s="; 672. 673. if !empty$plarray 674. 675. usort$plarray, createfunction'$a, $b', 'if $a'.$sort.' == $b'.$sort.' return 0; if $a'.$sort.' '.$sorttype.' $b'.$sort.' return -1; return 1;'; 676. Input parameter...
Dokeos LMS <= 1.8.5 (whoisonline.php) PHP Code Injection Exploit
No description provided by source. ?php / ----------------------------------------------------------------------- Dokeos LMS = 1.8.5 whoisonline.php Remote PHP Code Injection Exploit ----------------------------------------------------------------------- author...: EgiX mail.....:...
GLSA-200812-07 : Mantis: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200812-07 Mantis: Multiple vulnerabilities Multiple issues have been reported in Mantis: EgiX reported that manageprojpage.php does not correctly sanitize the sort parameter before passing it to createfunction in core/utilityapi.p...
PhpWebGallery <= 1.7.2 Session Hijacking / Code Execution Exploit
No description provided by source. ?php / ------------------------------------------------------------------------ PhpWebGallery = 1.7.2 Remote Session Hijacking / Code Execution Exploit ------------------------------------------------------------------------ author...: EgiX mail.....:...
GdPicture Pro 'gdpicture4s.ocx' ActiveX控件任意文件覆盖漏洞
BUGTRAQ ID:31504 CNCAN ID：CNCAN-2008100305 GdPicture Pro是一款支持多格式的图像管理软件。 GdPicture Pro包含的gdpicture4s.ocx ActiveX控件存在设计错误，远程攻击者可以利用漏洞以应用程序权限覆盖系统文件。 SaveAsPDF方法允许通过sFilePath参数建立和覆盖文件，通过使用其他参数，如sTitle，攻击者可以注入HTML代码，使用hcp://协议执行。GdPicturePro5.Imaging也存在此漏洞。 GdPicture GdPicture Pro GdPicture GdPicture...
phpScheduleIt <= 1.2.10 (reserve.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =================================================================== phpScheduleIt settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo;...
phpScheduleIt 1.2.10 - 'reserve.php' Remote Code Execution
settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo; 60. $t-settitle$resinfo'title'; 61. $t-printHTMLHeader; 62. $t-startMain; 63. presentreservation$resinfo'resid'; 64. ... 79. function...
phpscheduleit-exec.txt
settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo; 60. $t-settitle$resinfo'title'; 61. $t-printHTMLHeader; 62. $t-startMain; 63. presentreservation$resinfo'resid'; 64. ... 79. function...
phpScheduleIt 1.2.10 - reserve.php Remote Code Execution
phpScheduleIt 1.2.10 - reserve.php Remote Code Execution settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo; 60. $t-settitle$resinfo'title'; 61. $t-printHTMLHeader; 62. $t-startMain; 63...