CVE-2008-3455

PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd parameter...

phphostdir-cookie.txt

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie = "adm=1; path=/"; document.cookie =...

JnSHosts PHP Hosting Directory 'admin.php'远程文件包含漏洞

BUGTRAQ ID: 30428 CNCAN ID：CNCAN-2008073110 JnSHosts PHP Hosting Directory是一款基于PHP的论坛程序。 JnSHosts PHP Hosting Directory不正确过滤用户提交的参数，远程攻击者可以利用漏洞以WEB进程权限执行任意PHP代码。 问题是'admin.php'脚本不正确过滤用户提交的WEB参数，指定远程服务器上的任意文件作为包含对象，可导致以WEB进程权限执行任意PHP代码。 JnSHosts PHP Hosting Directory 2.0 目前没有解决方案提供：...

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability

No description provided by source. PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie =...

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================ PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability ================================================================ PHP Hosting Directory 2.0 Insecure Cookie...

PHP Hosting Directory 2.0 - Insecure Cookie Handling

PHP Hosting Directory 2.0 - Insecure Cookie Handling PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit:...

PHP Hosting Directory 2.0 (admin.php rd) RFI Vulnerability

No description provided by source. Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Found By : RoMaNcYxHaCkEr My Homepage : WwW.4RxH.CoM My Group : RoMaNTiC-TeaM Type Of Exploit : RFI P.O.C. :...

PHP Hosting Directory 2.0 - Insecure Cookie Handling

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie = "adm=1; path=/"; document.cookie =...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2711 Here are the detail...

PHP Hosting Directory 2.0 - Remote File Inclusion

PHP Hosting Directory 2.0 - Remote File Inclusion Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Found By : RoMaNcYxHaCkEr My Homepage : WwW.4RxH.CoM My Group : RoMaNTiC-TeaM Type Of Exploit : RFI P.O.C. :...

PHP Hosting Directory 2.0 (admin.php rd) RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== PHP Hosting Directory 2.0 admin.php rd RFI Vulnerability ========================================================== Name Of Script : PHP Hosting Directory 2.0 Download From :...

PHP Hosting Directory 2.0 - Remote File Inclusion

Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Found By : RoMaNcYxHaCkEr My Homepage : WwW.4RxH.CoM My Group : RoMaNTiC-TeaM Type Of Exploit : RFI P.O.C. :...

CVE-2008-3212

Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to admin/login.php, or the 3 uname or 4 pass parameter to login.php. NOTE: the provenance of this information is...

CVE-2008-3211

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1...

Authentication flaw

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1...

Sql injection

Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to admin/login.php, or the 3 uname or 4 pass parameter to login.php. NOTE: the provenance of this information is...

CVE-2008-3212

The CVE-2008-3212 entry concerns the Scripteen Free Image Hosting Script 1.2.1. It describes multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via the following parameters: (1) username or (2) password to admin/login.php, and (3) uname or (4) pass ...

CVE-2008-3211

CVE-2008-3211 affects Scripteen Free Image Hosting Script 1.2 and 1.2.1. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1, enabling unauthorized admin actions. This is a cookie-based auth bypass, with no expl...

CVE-2008-3212

Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to admin/login.php, or the 3 uname or 4 pass parameter to login.php. NOTE: the provenance of this information is...

CVE-2008-3211

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1...