8 matches found
Bitweaver <= 2.6 saveFeed() Remote Code Execution Exploit
No description provided by source. ?php / Bitweaver = 2.6 /boards/boardsrss.php / saveFeed remote code execution exploit by Nine:Situations:Group::bookoo php.ini independent site: http://retrogod.altervista.org/ software site: http://www.bitweaver.org/ You need an user account and you need to...
CVE-2009-4154
Directory traversal vulnerability in includes/feedcreator.class.php in Elxis CMS allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...
Elxis - Filename Directory Traversal
Elxis - Filename Directory Traversal source: https://www.securityfocus.com/bid/37158/info Elxis is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could...
Bitweaver 2.6 - 'saveFeed()' Remote Code Execution
saveFeed $rssversionname, $cacheFile ; ... it calls saveFeed function in an insecure way, arguments are built on $REQUESTversion var and may contain directory traversal sequences... now look at saveFeed function in /rss/feedcreator.class.php ... function saveFeed$filename="", $displayContents=tru...
Bitweaver <= 2.6 saveFeed() Remote Code Execution Exploit
Exploit for unknown platform in category web applications ========================================================= Bitweaver saveFeed $rssversionname, $cacheFile ; ... it calls saveFeed function in an insecure way, arguments are built on $REQUESTversion var and may contain directory traversal...
Design/Logic Flaw
feedcreator.class.php aka the syndication component in Joomla! 1.0.7 allows remote attackers to cause a denial of service stressed file cache by creating many files via filenames in the feed parameter to index.php...
Design/Logic Flaw
feedcreator.class.php aka the syndication component in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via a "/" slash in the feed parameter to index.php, which reveals the path in an error message...
CVE-2006-1028
Vulnerability: CVE-2006-1028 affects Joomla! 1.0.7 via the feedcreator.class.php (syndication component). Attackers can trigger a denial of service by creating many files through filenames supplied in the feed parameter to index.php, stressing the file cache. Impact: remote DoS with complete avai...