106 matches found
DreamArticle 3.0 background the validation logic vulnerability and injection vulnerabilities, resulting in a direct login to backend-bug warning-the black bar safety net
Team: bbs.wolvez.org By q1ur3n 在 admin/global.php there is such a piece of code, used to implement the”remember password”in the login back-office functions. $administrator = getcookie"administrator"; $adminpassword = getcookie"adminpassword"; if $administrator && $adminpassword...
CVE-2008-6377: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter...
4Images 1.7.6 Local Inclusion Vulnerability
Bug file : global.php if isset$HTTPGETVARS'l' || isset$HTTPPOSTVARS'l' $requestedl = isset$HTTPGETVARS'l' ? trim$HTTPGETVARS'l' : trim$HTTPPOSTVARS'l'; if $requestedl != $config'languagedir' && fileexistsROOTPATH.'lang/'.$requestedl.'/main.php' $l = $requestedl; $config'languagedir' = $l;...
Multi SEO phpBB 1.1.0 (pfad) Remote File Inclusion Vulnerability
No description provided by source. ========================================================================== o Multi SEO phpBB 1.1.0 Remote File Inclusion Vulnerability Software : Multi SEO phpBB version 1.1.0 Vendor : http://www.phpbb-seo.de/ Download :...
Multi SEO phpBB 1.1.0 (pfad) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================ Multi SEO phpBB 1.1.0 pfad Remote File Inclusion Vulnerability ================================================================...
Multi SEO phpBB 1.1.0 - Remote File Inclusion
Multi SEO phpBB 1.1.0 - Remote File Inclusion ========================================================================== o Multi SEO phpBB 1.1.0 Remote File Inclusion Vulnerability Software : Multi SEO phpBB version 1.1.0 Vendor : http://www.phpbb-seo.de/ Download :...
Multi SEO phpBB 1.1.0 - Remote File Inclusion
========================================================================== o Multi SEO phpBB 1.1.0 Remote File Inclusion Vulnerability Software : Multi SEO phpBB version 1.1.0 Vendor : http://www.phpbb-seo.de/ Download : http://www.phpbb-seo.de/downloads/multi.html Author : NoGe Contact :...
iShowMusic V1. 2 direct write shell vulnerability-vulnerability warning-the black bar safety net
By qiur3n http://www.wolvez.org/ 2008-06-17 iShow Music is a basic set in the PHP+TXT online music player. The program uses text data stored in a way, without MYSQL database support, and the program code and interface templates separated, and easy to your music website interface to modify. Offici...
CVE-2008-3762: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in onlinestatushtml.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php...
PHP Live Helper 2.0.1 - Multiple Vulnerabilities
GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper DBsite-queryfirst"SELECT FROM ". $this-dbprefix.$table." where ".$from."='$id'"; if isarray$result foreach $result as $key = $val $info$key = stripslashes$val;...
MercuryBoard <= 1.1.5 (login.php) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================================== MercuryBoard settitle$this-lang-loginheader; 55. $this-tree$this-lang-loginheader; 56. 57. //print "agent: $this-agent\n"; 58. 59. if !isset$this-post'submit' 60...
MercuryBoard 1.1.5 - login.php Blind SQL Injection
MercuryBoard 1.1.5 - login.php Blind SQL Injection settitle$this-lang-loginheader; 55. $this-tree$this-lang-loginheader; 56. 57. //print "agent: $this-agent\n"; 58. 59. if !isset$this-post'submit' 60. $requesturi = $this-geturi; 61. 62. if substr$requesturi, -8 == 'register' 63. $requesturi =...
sablog 1.6 多个跨站漏洞
sablog是国内安全研究人员写的一款blog程序。由于过滤不严，存在多个跨站漏洞 www.sablog.net sablog 1.6 在global.php中过滤curl，cid，setday等 $modelink = ''; if $action $modelink .= '&action='.$action; if $curl $modelink .= '&curl='.htmlspecialchars$curl; if $cid $modelink .= '&cid='.htmlspecialchars$cid; if $setdate $modelink .=...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Thierry Leriche Restaurant Management System ReMaSys 0.5 allow remote attackers to execute arbitrary PHP code via a URL in 1 the DIRROOT parameter to a global.php, or the 2 DIRPAGE parameter to b template/fr/page.php or c...
Php168 v 4.0 sp global.php 写入漏洞
在global.php中有这样的代码: function loginlogs$username,$password global $timestamp,$onlineip; $logdb="$username\t$password\t$timestamp\t$onlineip"; @includePHP168PATH."cache/adminloginlogs.php"; $writefile="$value $jj++; $writefile.="\$logdb=\"$value\";"; if$jj200 break;...
CVE-2007-2474: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 include/payment/payflowpro.php, 2 global.php, or 3 libsecure.php, different vectors than CVE-2007-2070...
sunshop v4 >> RFI
vendor : turnkeywebtools.com by : s3rv3rhack3r [email protected] bugz: ++++++++++++++++++++ include/payment/payflowpro.php include $abspath."/include/payment/payflowpro/pfpro.class.php"; ++++++++++++++++++++ global.php requireonce $abspath."/libsecure.php"; ++++++++++++++++++++ libsecure.php inclu...
PNews Global.PHP远程文件包含漏洞
PNews是一款基于PHP的新闻管理程序。 PNews不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Global.PHP'脚本对用户提交的'nbs'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 pNews Systems pNews 1.1 http://sourceforge.net/projects/phpnews-system/ http://www.example.com/includes/global.php?nbs=shell?...
PHP Live Helper <= 2.0 (abs_path) Remote File Inclusion Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV43$2006 ------------------------------------------------------------------------------ ECHOADV43$2006 PHP Live Helper = 2.0 abspath Remote File Inclusion...
Cwfm <= 0.9.1 (Language) Remote File Inclusion Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + Cwfm-0.9.1 Language Remote File Inclusion + + Original advisory: + + http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1LanguageRemoteFileInclusion.htm +...