756 matches found
PT-2006-5395 · Phprojekt · Phprojekt
Name of the Vulnerable Software and Affected Versions: PHProjekt version 0.6.1 Description: The issue allows remote attackers to execute arbitrary PHP code via the path pre parameter in several PHP files, including cm lib.inc.php, doc/br.edithelp.php, doc/de.edithelp.php, doc/ct.edithelp.php,...
PmWiki < 2.1.21 Global Variables Overwriting
The version of PmWiki installed on the remote host contains a programming flaw in 'pmwiki.php' that may allow an unauthenticated remote attacker to overwrite global variables used by the application, which could in turn be exploited to execute arbitrary PHP code on the affected host, subject to t...
CVE-2006-4458
Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. dot dot sequence and trailing null %00 byte in the GLOBALSphpgwinfouserpreferencescommoncountry parameter...
CubeCart < 3.0.13 Multiple Remote Vulnerabilities (LFI, SQLi, XSS)
The version of CubeCart installed on the remote host fails to properly sanitize user-supplied input to the 'gateway' parameter before using it in the 'includes/content/gateway.inc.php' script to include PHP code. An unauthenticated, remote attacker may be able to exploit this issue to view...
CVE-2006-4448
Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGBASEPATH parameter in a admin/autoprompter.php and b includes/common.inc.php, and the 2 CONFIGLANGUAGECPATH parameter ...
CVE-2006-4448
Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGBASEPATH parameter in a admin/autoprompter.php and b includes/common.inc.php, and the 2 CONFIGLANGUAGECPATH parameter ...
phpGroupWare <= 0.9.16.010 GLOBALS[] Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================== phpGroupWare calendar/inc/class.holidaycalc.inc.php line 14-33: .... / $Id: class.holidaycalc.inc.php,v 1.5 2001/08/26 12:32:28 skeeter Exp $ / if...
e107-GLOBALS-php.txt
!/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- e107 = 0.75 GLOBALS overwrite/ZendHashDelKeyOrIndex remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork: "This site is...
phpGroupWare 0.9.16.010 - 'GLOBALS[]' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on calendar/inc/class.holidaycalc.inc.php line 14-33: .... / $Id: class.holidaycalc.inc.php,v 1.5 2001/08/26 12:32:28 skeeter Exp $ / if empty$GLOBALS'phpgwinfo''user''preferences''common''country' $rule = 'US'; else $rule =...
Bigace 1.8.2 (GLOBALS) Remote File Inclusion
Author : Vampire Location : Iran - Tehran HomePage : http://www.hackerz.ir Email : Vampirechiristofatyahoodotcom Critical Level : Dangerous ------------------------------------------------------------------------ --------------- Affected Software Description: Application : Bigace version : 1.8.2...
e107 0.75 - GLOBALS Overwrite Remote Code Execution
e107 0.75 - GLOBALS Overwrite Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- e107 = 0.75 GLOBALS overwrite/ZendHashDelKeyOrIndex remote commands execution exploit by rgod [email protected] site:...
e107 <= 0.75 (GLOBALS Overwrite) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================== e107 = 0.75 GLOBALS Overwrite Remote Code Execution Exploit ============================================================== !/usr/bin/php -q -d shortopentag=on ? printr'...
e107 <= 0.75 (GLOBALS Overwrite) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- e107 = 0.75 GLOBALS overwrite/ZendHashDelKeyOrIndex remote commands execution exploit by rgod [email protected] site:...
iziContents <= RC6 GLOBALS[] Remote Code Execution Exploit
Exploit for unknown platform in category web applications ========================================================== iziContents include/rssfunctions.php line 32-40: .... $GLOBALS"rootdp" = './'; requireonce $GLOBALS"rootdp"."include/config.php"; requireonce $GLOBALS"rootdp"."include/db.php";...
contxtd.txt
Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access to this location is not...
[SA21594] SportsPHool "mainnav" File Inclusion Vulnerability
TITLE: SportsPHool "mainnav" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA21594 VERIFY ADVISORY: http://secunia.com/advisories/21594/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: SportsPHool 1.x http://secunia.com/product/11629/ DESCRIPTION: Kacper has...
Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln
Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access t...
Mambo Component bigAPE-Backup 1.1 - Remote File Inclusion
Mambo Component bigAPE-Backup 1.1 - Remote File Inclusion / Notes: globals bypass with a multipart/form-data POST PHP4 = 4.4.0 PHP5 = 5.0.5 http://www.hardened-php.net/globals-problem /str0ke / C Y BE R - W A R R i O R T I M mambo combabackup 1.1 Component mosConfigabsolutepath Remote File...
PHPay 2.02 - nu_mail.inc.php?mail() Remote Injection
PHPay 2.02 - numail.inc.php?mail Remote Injection !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed...
PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection
!/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print...