7043 matches found
Podcast Generator <= 1.1 Arbitrary File Deletion Vulnerability
Podcast Generator is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the webserver. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Mandriva Update for kernel MDKSA-2007:171 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDKSA-2007:171 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Code injection
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter...
Code injection
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action...
CVE-2009-1230
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action...
CVE-2009-1226
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter...
CVE-2009-1226
CVE-2009-1226 affects Podcast Generator 1.1 and earlier. The issue is an improper restriction of access to admin functions in core/admin/delete.php, allowing remote attackers to delete arbitrary files via the file parameter. Base score 7.5 (HIGH) per NVD. No patch/mitigation details are provided ...
CVE-2009-1230
Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action...
CVE-2009-1226
core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter...
CVE-2009-1230
Podcast Generator pre-1.2 is vulnerable to Arbitrary File Deletion via core/admin/delete.php and related input handling flaws (e.g., persisting inputs like file/absoluteurl/theme_path with register_globals enabled). Exploitation could let an attacker delete arbitrary files on the webserver. Affec...
Podcast Generator 1.1 Code Execution
!/usr/bin/php -q -d shortopentag=on $file.$ext $Ldeleted"; --------------------------- no check for admin rights, so now we can delete whatever file we want, with any exstension.. so let's delete config.php and make a rfesh new installation with a password set by us! the RCE is triggered in...
Podcast Generator <= 1.1 Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " Podcast Generator = 1.1 Remote Code Execution Vendor: http://podcastgen.sourceforge.net Exploit Author: BlackHawk Author's Site: http://itablackhawk.altervista.org Credits goes to RGod for the code Thanks to Marija...
Podcast Generator 1.1 - Remote Code Execution
!/usr/bin/php -q -d shortopentag=on $file.$ext $Ldeleted"; --------------------------- no check for admin rights, so now we can delete whatever file we want, with any exstension.. so let's delete config.php and make a rfesh new installation with a password set by us! the RCE is triggered in...
Podcast Generator <= 1.1 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================== Podcast Generator $file.$ext $Ldeleted"; --------------------------- no check for admin rights, so now we can delete whatever file we want, with any exstension.. so let's delete...
Ubuntu Update for linux-source-2.6.20 vulnerabilities USN-470-1
Ubuntu Update for Linux kernel vulnerabilities USN-470-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4701.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.20 vulnerabilities USN-470-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for linux-source-2.6.17 vulnerabilities USN-486-1
Ubuntu Update for Linux kernel vulnerabilities USN-486-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4861.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.17 vulnerabilities USN-486-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for bind9 vulnerability USN-491-1
Ubuntu Update for Linux kernel vulnerabilities USN-491-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4911.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for bind9 vulnerability USN-491-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu Update for linux-source-2.6.15 vulnerability USN-489-1
Ubuntu Update for Linux kernel vulnerabilities USN-489-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4891.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15 vulnerability USN-489-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu: Security Advisory (USN-489-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-508-1
Ubuntu Update for Linux kernel vulnerabilities USN-508-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5081.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15 vulnerabilities USN-508-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...