Remote file inclusion

PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd parameter...

CVE-2008-3454

JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm" cookie value to 1...

CVE-2008-3454

JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm" cookie value to 1...

CVE-2008-3454

CVE-2008-3454 affects JnSHosts PHP Hosting Directory 2.0. The vulnerability allows remote attackers to bypass authentication by setting the adm cookie value to 1, gaining administrative access. Exploitation is possible over a network with low complexity and no authentication required. The documen...

CVE-2008-3455

PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd parameter...

CVE-2008-3455

CVE-2008-3455 is a PHP remote file inclusion vulnerability affecting JnSHosts PHP Hosting Directory 2.0. The flaw allows arbitrary PHP code execution via a URL in the rd parameter of include/admin.php, enabling full compromise of affected systems (as per NVD description). The connected documents ...

phphostdir-cookie.txt

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie = "adm=1; path=/"; document.cookie =...

JnSHosts PHP Hosting Directory 'admin.php'远程文件包含漏洞

BUGTRAQ ID: 30428 CNCAN ID：CNCAN-2008073110 JnSHosts PHP Hosting Directory是一款基于PHP的论坛程序。 JnSHosts PHP Hosting Directory不正确过滤用户提交的参数，远程攻击者可以利用漏洞以WEB进程权限执行任意PHP代码。 问题是'admin.php'脚本不正确过滤用户提交的WEB参数，指定远程服务器上的任意文件作为包含对象，可导致以WEB进程权限执行任意PHP代码。 JnSHosts PHP Hosting Directory 2.0 目前没有解决方案提供：...

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability

No description provided by source. PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie =...

PHP Hosting Directory 2.0 - Insecure Cookie Handling

PHP Hosting Directory 2.0 - Insecure Cookie Handling PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit:...

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================ PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability ================================================================ PHP Hosting Directory 2.0 Insecure Cookie...

PHP Hosting Directory 2.0 (admin.php rd) RFI Vulnerability

No description provided by source. Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Found By : RoMaNcYxHaCkEr My Homepage : WwW.4RxH.CoM My Group : RoMaNTiC-TeaM Type Of Exploit : RFI P.O.C. :...

PHP Hosting Directory 2.0 - Insecure Cookie Handling

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie = "adm=1; path=/"; document.cookie =...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2711 Here are the detail...

PHP Hosting Directory 2.0 - Remote File Inclusion

Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Found By : RoMaNcYxHaCkEr My Homepage : WwW.4RxH.CoM My Group : RoMaNTiC-TeaM Type Of Exploit : RFI P.O.C. :...

PHP Hosting Directory 2.0 (admin.php rd) RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== PHP Hosting Directory 2.0 admin.php rd RFI Vulnerability ========================================================== Name Of Script : PHP Hosting Directory 2.0 Download From :...

PHP Hosting Directory 2.0 - Remote File Inclusion

PHP Hosting Directory 2.0 - Remote File Inclusion Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Found By : RoMaNcYxHaCkEr My Homepage : WwW.4RxH.CoM My Group : RoMaNTiC-TeaM Type Of Exploit : RFI P.O.C. :...

CVE-2008-3211

Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1...

CVE-2008-3212

Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to admin/login.php, or the 3 uname or 4 pass parameter to login.php. NOTE: the provenance of this information is...

Sql injection

Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to admin/login.php, or the 3 uname or 4 pass parameter to login.php. NOTE: the provenance of this information is...