2860 matches found
PHP <= 4.4.7 / 5.2.3 MySQL/MySQLi Safe Mode Bypass Vulnerability
No description provided by source. Affected Products: = PHP 5.2.3 = PHP 4.4.7 Authors: Mattias Bengtsson [email protected] Philip Olausson [email protected] Reported: 2007-06-05 Released: 2007-08-30 CVE: CVE-2007-3997 Issue: A vulnerability exists in PHP's MySQL and MySQLi extenstions which can be use...
PHP <= 4.4.7 / 5.2.3 MySQL/MySQLi Safe Mode Bypass Vulnerability
Exploit for multiple platform in category local exploits ================================================================ PHP Philip Olausson Reported: 2007-06-05 Released: 2007-08-30 CVE: CVE-2007-3997 Issue: A vulnerability exists in PHP's MySQL and MySQLi extenstions which can be used to bypas...
PHP 4.4.7/5.2.3 - MySQL/MySQLi 'Safe_Mode' Bypass
Affected Products: Philip Olausson Reported: 2007-06-05 Released: 2007-08-30 CVE: CVE-2007-3997 Issue: A vulnerability exists in PHP's MySQL and MySQLi extenstions which can be used to bypass PHP's safemode security restriction. Description: PHP is a widely-used general-purpose scripting language...
Unfixed XSS vulnerability at www.netvoyager.ca
Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.netvoyager.ca, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is current...
Unfixed XSS vulnerability at www.rock-hosting.com
Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting www.rock-hosting.com, which at the time of submission ranked 1114021 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It i...
CVE-2007-4588
Multiple cross-site scripting XSS vulnerabilities in InterWorx Hosting Control Panel InterWorx-CP Server Admin Level NodeWorx 3.0.2 1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php; and allow remote authenticated users to inject arbitrary web script or...
CVE-2007-4589
CVE-2007-4589 describes multiple XSS vulnerabilities in InterWorx Hosting Control Panel (InterWorx-CP) Webmaster Level (SiteWorx) 3.0.2. The issue allows injection of arbitrary script/HTML by manipulating PATH_INFO to index.php and to a set of scripts (siteworx.php, users.php, ftp.php, mysql.php,...
PHP Hosting Biller 1.0 - index.php Cross-Site Scripting
PHP Hosting Biller 1.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/24517/info Php Hosting Biller is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perfor...
PHP Hosting Biller 1.0 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24517/info Php Hosting Biller is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in...
[ECHO_ADV_83$2007] PhpHostBot <= 1.06 (svr_rootscript) Remote File Inclusion Vulnerability
ECHOADV83$2007 ----------------------------------------------------------------------------------------- ECHOADV83$2007 PhpHostBot = 1.06 svrrootscript Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...
PhpHostBot <= 1.06 (svr_rootscript) Remote File Inclusion Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV83$2007 ----------------------------------------------------------------------------------------- ECHOADV83$2007 PhpHostBot = 1.06 svrrootscript Remote File Inclusion...
PhpHostBot 1.06 - svr_rootscript Remote File Inclusion
PhpHostBot 1.06 - svrrootscript Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV83$2007 ----------------------------------------------------------------------------------------- ECHOADV83$2007 PhpHostBot = 1.06 svrrootscript Remote...
PhpHostBot <= 1.06 (svr_rootscript) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================= PhpHostBot = 1.06 svrrootscript Remote File Inclusion Vulnerability ======================================================================= \ /\ \ / | \ \ | / \ // /...
PhpHostBot 1.06 - 'svr_rootscript' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV83$2007 ----------------------------------------------------------------------------------------- ECHOADV83$2007 PhpHostBot = 1.06 svrrootscript Remote File Inclusion Vulnerability...
Unfixed XSS vulnerability at unitedhosting.co.uk
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting unitedhosting.co.uk, which at the time of submission ranked 71948 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...
Unfixed XSS vulnerability at healthy.absolutewebhosting.co.uk
Security researcher Norehem, has submitted on 31/07/2007 a cross-site-scripting XSS vulnerability affecting healthy.absolutewebhosting.co.uk, which at the time of submission ranked 1445283 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
[slackware-security] thunderbird
New Thunderbird packages are available for Slackware 11.0 and 12.0 to fix two possible security issues. This package may also be used on many older versions of Slackware though we're not certain how far back... More details about the issues may be found here:...
[MajorSecurity Advisory #51]Virtual Hosting Control System - Session fixation Issue
MajorSecurity Advisory 51Virtual Hosting Control System - Session fixation Issue Details ======= Product: Virtual Hosting Control System Affected version: 2.4.7.1 and prior Remote-Exploit: yes Vendor-URL: http://www.vhcs.net Vendor-Status: informed Advisory-Status: published Credits ============...
MPack with virtual hosting and PHP security-vulnerability warning-the black bar safety net
MPack is by a self-proclaimed "Dream Coders Team" of the organization development of the PHP program, which contain a number of the latest exploit code can be used to manipulate the distal end of attacks on Panda Labs at the end of last year when for the first time found that, at the time someone...
phb10-xss.txt
Application: PHP HOSTING BILLER Web Site: http://www.jnshosts.com/phphostingbiller.php Versions: 1.0 Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: No ------------------------------------------------------- 1 Introduction 2 Bug 3 The Code 4 Fix 5 About Serapis...