719 matches found
CVE-2007-2630
Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All aka 12All 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and...
CVE-2007-2630
Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All aka 12All 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and...
CVE-2007-2630
Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All aka 12All 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and...
CVE-2007-2630
The CVE-2007-2630 entry concerns an Incomplete blacklist vulnerability in the FCKeditor module’s filemanager/browse paths (config.php) used by ActiveCampaign 1-2-All (12All) versions 4.50–4.53.13. The issue allows remote authenticated administrators to upload and possibly execute .php4/.php5 file...
CVE-2007-2630: Undefined Security Weakness
Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All aka 12All 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and...
12All File Upload Vulnerability
Author: John McGuire Company: ActiveCampaign Product: 1-2-All Version: 4.5x - 4.53.13 Flaw: Arbitrary File Upload Vendor Notified: Yes Patch Available: Yes Patch Location: http://www.activecampaign.com/support/forum/showthread.php?t=3293 URL:...
inout-exec.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Site CMD Host: target server ip/hostname Path: path of phpMyNewsletter CMD: a shell command Example: php ".$argv0." localhost /inout/ cat /etc/password"; die; /...
InoutMailingListManager 3.1 - Remote Command Execution
InoutMailingListManager 3.1 - Remote Command Execution !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Site CMD Host: target server ip/hostname Path: path of phpMyNewsletter CMD: a shell command Example: php...
InoutMailingListManager <= 3.1 Remote Command Execution Exploit
Exploit for unknown platform in category web applications =============================================================== InoutMailingListManager = 3.1 Remote Command Execution Exploit =============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "...
InoutMailingListManager 3.1 - Remote Command Execution
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc / er...
InoutMailingListManager <= 3.1 Remote Command Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " InoutMailingListManager = 3.1 Command Execution Exploit + Login Retrieve + Advisory by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if...
Woven dream content management system（DEDECMS 3.the X+4. X upload vulnerability-vulnerability warning-the black bar safety net
Ghost boy note:accurate to say should be DEDECMS used in the php version of FCKeditor there upload vulnerability, the gif89a file header to cheat, did not expect the php version of FCKeditor, even the existence of such a vulnerability, the gif89a file header spoofing is not fresh things. Sources ...
CVE-2006-6978
Cross-site scripting XSS vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the 1 href or 2 onmouseover attribute of the A HTML tag...
CVE-2006-6978
Cross-site scripting XSS vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the 1 href or 2 onmouseover attribute of the A HTML tag...
CVE-2006-6978
The CVE-2006-6978 entry describes a Cross-site Scripting (XSS) vulnerability in FCKEditor’s "Basic Toolbar Selection". The issue allows an attacker to trigger arbitrary JavaScript via the javascript: URI in the href or onmouseover attributes of an A tag. Affected component is FCKEditor’s Basic To...
CVE-2006-6978: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the 1 href or 2 onmouseover attribute of the A HTML tag...
[SA23662] Cuyahoga FCKEditor Security Bypass Issue
TITLE: Cuyahoga FCKEditor Security Bypass Issue SECUNIA ADVISORY ID: SA23662 VERIFY ADVISORY: http://secunia.com/advisories/23662/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Cuyahoga 1.x http://secunia.com/product/13174/ DESCRIPTION: A security issue has be...
Cuyahoga FCKEditor Misconfiguration Unrestricted File Upload
The remote host is running Cuyahoga, an open source .NET website framework. The installation of Cuyahoga fails to require authorization to access the FCKEditor component included with it. An unauthenticated, remote attacker may be able to leverage this flaw to view and upload files with FCKEditor...
CVE-2007-0147
Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles...
Design/Logic Flaw
Cuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web.config file, which allows remote attackers to upload files when these privileges were intended only for the Administrator and Editor roles...