EUVD-2009-2374

Malware in sbrugna...

Remote code execution

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a default component that permits arbitrary upload of PHP files, because the formmailer widget blocks .php files but not .php5 or .phtml files. This is related t...

CVE-2018-13981

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a default component that permits arbitrary upload of PHP files, because the formmailer widget blocks .php files but not .php5 or .phtml files. This is related t...

CVE-2018-13981

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a default component that permits arbitrary upload of PHP files, because the formmailer widget blocks .php files but not .php5 or .phtml files. This is related t...

CVE-2018-13981: Unrestricted Upload of File with Dangerous Type

The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a default component that permits arbitrary upload of PHP files, because the formmailer widget blocks .php files but not .php5 or .phtml files. This is related t...

PT-2018-12259

Name of the Vulnerable Software and Affected Versions Zeta Producer Desktop CMS versions prior to 14.2.1 Description The issue allows for unauthenticated remote code execution due to a default component that permits arbitrary upload of PHP files. This is possible because the formmailer widget...

Zeta Producer Desktop CMS 14.2.0 - Remote Code Execution Local File Disclosure

Zeta Producer Desktop CMS 14.2.0 - Remote Code Execution Local File Disclosure SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Remote Code Execution & Local File Disclosure product: Zeta Producer Desktop CMS vulnerable...

Zeta Producer Desktop CMS 14.2.0 Code Execution / File Disclosure

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Remote Code Execution & Local File Disclosure product: Zeta Producer Desktop CMS vulnerable version: =14.2.1 CVE number: CVE-2018-13981, CVE-2018-13980 impact: critical...

jax formmailer 3.0.0 - Remote File Inclusion Vulnerability

No description provided by source. --:remote file include:-- --------------------------------- script:Jax FormMailer 3.0.0 Release:01.06.2008 - Author: ahmadbady ----------------------------------------------------------------------- download...

CVE-2009-2378

PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASEDIRjaxformmailer parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASEDIRjaxformmailer parameter...

CVE-2009-2378

PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASEDIRjaxformmailer parameter...

CVE-2009-2378

CVE-2009-2378 is a PHP remote file inclusion vulnerability affecting Jax FormMailer 3.0.0, described as allowing remote attackers to execute arbitrary PHP code via a URL in the BASE_DIR[jax_formmailer] parameter in formmailer.admin.inc.php. The vulnerability is documented in multiple sources (e.g...

CVE-2009-2378: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASEDIRjaxformmailer parameter...

Jax FormMailer 3.0.0 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== Jax FormMailer 3.0.0 Remote File Inclusion Vulnerability ======================================================== --:remote file include:-- --------------------------------- script:J...

Jax FormMailer 3.0.0 Remote File Inclusion

--:remote file include:-- --------------------------------- script:Jax FormMailer 3.0.0 Release:01.06.2008 - Author: ahmadbady ----------------------------------------------------------------------- download from:http://www.jtr.de/scripting/php/formmailer/indexeng.html...

Jax FormMailer 3.0.0 Remote File Inclusion Vulnerability

No description provided by source. --:remote file include:-- --------------------------------- script:Jax FormMailer 3.0.0 Release:01.06.2008 - Author: ahmadbady ----------------------------------------------------------------------- download...

jax formmailer 3.0.0 - Remote File Inclusion

--:remote file include:-- --------------------------------- script:Jax FormMailer 3.0.0 Release:01.06.2008 - Author: ahmadbady ----------------------------------------------------------------------- download from:http://www.jtr.de/scripting/php/formmailer/indexeng.html...

jax formmailer 3.0.0 - Remote File Inclusion

jax formmailer 3.0.0 - Remote File Inclusion --:remote file include:-- --------------------------------- script:Jax FormMailer 3.0.0 Release:01.06.2008 - Author: ahmadbady ----------------------------------------------------------------------- download...

CVE-2005-4880: Undefined Security Weakness

Jax Guestbook 3.1 and 3.31 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain IP addresses of users via a direct request to 1 guestbook, 2 guestbookips2block, 3 ips2block, and 4 formmailer/logfile.csv...