EUVD-2007-1571

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALStplname parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php...

CVE-2007-1577

Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALStplname parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php...

CVE-2007-1577

Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALStplname parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php...

CVE-2007-1577

CVE-2007-1577 affects GeBlog 0.1. Affected component: index.php. Root cause: directory traversal via the GLOBALS[tplname] parameter, allowing remote attackers to include and execute arbitrary local files (via dot-dot sequences). The attack is demonstrated by injecting PHP into an Apache log file ...

geblog01-lfi.txt

!/usr/bin/perl GeBlog 0.1GLOBALStplnameLocal File Inclusion Exploit D.Script: http://sourceforge.net/projects/geblog/ V.Code: include "tpl/".$GLOBALS'tplname'."/html.func.inc.php"; Discovered & Coded by : GolDM = Mahmoodali Contact:[email protected] Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's...

GeBlog 0.1 GLOBALS[tplname] Local File Inclusion Exploit (win)

No description provided by source. !/usr/bin/perl GeBlog 0.1GLOBALStplnameLocal File Inclusion Exploit D.Script: http://sourceforge.net/projects/geblog/ V.Code: include "tpl/".$GLOBALS'tplname'."/html.func.inc.php"; Discovered & Coded by : GolDM = Mahmoodali Contact:[email protected] Greetz To:...

GeBlog 0.1 (Windows) - GLOBALS[tplname] Local File Inclusion

!/usr/bin/perl GeBlog 0.1GLOBALStplnameLocal File Inclusion Exploit D.Script: http://sourceforge.net/projects/geblog/ V.Code: include "tpl/".$GLOBALS'tplname'."/html.func.inc.php"; Discovered & Coded by : GolDM = Mahmoodali Contact:[email protected] Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's...

GeBlog 0.1 GLOBALS[tplname] Local File Inclusion Exploit (win)

Exploit for unknown platform in category web applications ============================================================== GeBlog 0.1 GLOBALStplname Local File Inclusion Exploit win ============================================================== !/usr/bin/perl GeBlog 0.1GLOBALStplnameLocal File...

GeBlog 0.1 (Windows) - GLOBALS[tplname] Local File Inclusion

GeBlog 0.1 Windows - GLOBALStplname Local File Inclusion !/usr/bin/perl GeBlog 0.1GLOBALStplnameLocal File Inclusion Exploit D.Script: http://sourceforge.net/projects/geblog/ V.Code: include "tpl/".$GLOBALS'tplname'."/html.func.inc.php"; Discovered & Coded by : GolDM = Mahmoodali...