257 matches found
Guppy 4.5.11 - Delete Databases Remote Denial of Service
Guppy 4.5.11 - Delete Databases Remote Denial of Service Change line 30 s/htp/http if you would like to see the logo. /str0ke Guppy = 4.5.11 Remote DOS Exploit Guppy = 4.5.11 Remote DOS Exploit by trueend5 Computer Security Science Researchers Institute KAPDA input name="host...
guppy459_xpl.txt
Guppy README";echo" now I have an 20051128162317hacker.inc file with this code inside: errors code HTTP."; $date = "Date : 28/11/2005 16:23"; $dest = "Page requested : ?"; $source = "Page source : "; $browser = "Browser : "; $addrip = "IP address : ";passthru"ls -laREADME";echo""; $domaine =...
CVE-2005-3927
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via 1 the meskin parameter to admin/editorTypetool.php, or the lng parameter to the in admin/inc scripts 2 archbatch.php, 3 dbbatch.php, and 4 nwlmail.php...
CVE-2005-3926
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via the SERVERREMOTEADDR parameter, which is injected into a .inc script that is later included by the main script...
CVE-2005-3926
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via the SERVERREMOTEADDR parameter, which is injected into a .inc script that is later included by the main script...
CVE-2005-3927
GuppY
CVE-2005-3927
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbitrary files via 1 the meskin parameter to admin/editorTypetool.php, or the lng parameter to the in admin/inc scripts 2 archbatch.php, 3 dbbatch.php, and 4 nwlmail.php...
CVE-2005-3926
GuppY
GuppY <= 4.5.9 Multiple Remote Vulnerabilities (Traversal, Code Exec)
The remote host is running GuppY, a content management system written in PHP. The version of GuppY installed on the remote host does not sanitize user input to the server variable 'REMOTEADDR' before using it in the 'error.php' script as part of an include script. An unauthenticated attacker can...
Guppy <= 4.5.9 Remote code execution
Guppy = 4.5.9 Remote code execution / various arbitrary inclusion issues software: site: http://www.freeguppy.org/ description: a very popular French PHP CMS that stores data in files i remote code/commands execution tested and working against php 5.0.2 and php 4.3.3 with register globals off and...
GuppY 4.5 - nwlmail.php?lng Traversal Arbitrary File Access
GuppY 4.5 - nwlmail.php?lng Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that...
GuppY 4.5 - archbatch.php?lng Traversal Arbitrary File Access
GuppY 4.5 - archbatch.php?lng Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that...
GuppY 4.5 - editorTypetool.php?meskin Traversal Arbitrary File Access
GuppY 4.5 - editorTypetool.php?meskin Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script cod...
GuppY 4.5 - 'dbbatch.php?lng' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web...
Guppy 4.5.9 - REMOTE_ADDR Remote Command Execution
Guppy 4.5.9 - REMOTEADDR Remote Command Execution Guppy body background-color:111111; SCROLLBAR-ARROW-COLOR: ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color: 1CB081; img backgro...
Guppy <= 4.5.9 (REMOTE_ADDR) Remote Commands Execution Exploit
No description provided by source. ?php if magicquotesgpc is off you can inject arbitrary php code from rgod /str0ke ---guppy459xpl.php 17.30 28/11/2005 Guppy =4.5.9 SERVERREMOTEADDR overwrite / remote commands xctn coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in...
GuppY 4.5 - 'editorTypetool.php?meskin' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web...
GuppY 4.5 - 'nwlmail.php?lng' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/15610/info GuppY is affected by multiple local file include and information disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web...
Guppy 4.5.9 - 'REMOTE_ADDR' Remote Command Execution
Guppy body background-color:111111; SCROLLBAR-ARROW-COLOR: ffffff; SCROLLBAR-BASE-COLOR: black; CURSOR: crosshair; color: 1CB081; img background-color: FFFFFF !important input backgro...
