1209 matches found
CVE-2008-6498
XAMPP 1.6.8 is affected by a CSRF vulnerability in security/xamppsecurity.php that lets an attacker hijack the user’s authenticated session to change the .htaccess password via the xampppasswd parameter. This vulnerability is identified as CVE-2008-6498. Public references in the provided document...
CVE-2008-6498
Cross-site request forgery CSRF vulnerability in security/xamppsecurity.php in XAMPP 1.6.8 allows remote attackers to hijack the authentication of users for requests that change a certain .htaccess password via the xampppasswd parameter...
[ECHO_ADV_107$2009] FubarForum <= 1.6 Critical File Disclosure Vulnerability
ECHOADV107$2009 ----------------------------------------------------------------------------------------- ECHOADV107$2009 FubarForum = 1.6 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, ...
chaozzDB 1.2 File Disclosure
ECHOADV105$2009 ----------------------------------------------------------------------------------------- ECHOADV105$2009 chaozzDB = 1.2 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, 16...
FubarForum 1.6 File Disclosure
ECHOADV107$2009 ----------------------------------------------------------------------------------------- ECHOADV107$2009 FubarForum = 1.6 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, ...
PHP < 4.4.5, 5.1.x < 5.1.7, 5.2.x < 5.2.6 DoS Vulnerability
PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...
Mandrake Security Advisory MDVSA-2009:066 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:066. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
PHP unauthorized access
mbstring.funcoverload setting in .htaccess is applied to all websites...
osCommerce unprotected admin directory
This host is running osCommerce, a widely installed open source shopping e-commerce solution. See http://www.oscommerce.com for more information. The store admin directory on your server needs to be password protected using .htaccess. Most of the time the server you are hosting your store on has...
osCommerce unprotected admin directory
The osCommerce admin directory on the remote host server needs to be password protected using .htaccess. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Firepack (admin/ref.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================== Firepack admin/ref.php Remote Code Execution Exploit ====================================================== !/usr/bin/perl Firepack - Remote Command\Code Execution Exploit Firepack is ...
Firepack - '/admin/ref.php' Remote Code Execution
!/usr/bin/perl Firepack - Remote Command\Code Execution Exploit Firepack is a web atting toolkit often used in 2008, when the most versions of it were published. A short time ago i looked though the sourcecode and noticed that Vulnerability which can be used if the admin doesn't use a .htaccess...
Get apache the file name parsing flaw vulnerability-vulnerability warning-the black bar safety net
apache file name parsing, is to start from the back to check the suffix, according to the last legitimate the suffix implementation. Such as: cmdshell. php. amxku because amxku is not apache to parse, so the apache put this file when the php file parsing. 可以 参见 http://www.4ngel.net/article/63.htm...
PHP 'error_log' 安全模式绕过漏洞
PHP is prone to a 'safemode' restriction-bypass vulnerability. Successful exploits could allow an attacker to write files in unauthorized locations. This vulnerability would be an issue in shared-hosting configurations where multiple users can create and execute arbitrary PHP script code, with th...
TWiki <= 4.2.2 (action) Remote Code Execution Vulnerability
No description provided by source. -----------webDEViL - w3bd3vil at gmail dot com ----------- -----------TWiki Remote Code Execution = 4.2.2-------------------- ----------developers site: http://www.twiki.org------------------- ----------CVE Ids : CVE-2008-3195--------------------------...
TWiki 4.2.2 - action Remote Code Execution
TWiki 4.2.2 - action Remote Code Execution -----------webDEViL - w3bd3vil at gmail dot com ----------- -----------TWiki Remote Code Execution header-type = $query-param'type'; So use this instead: print 'Content-type: '.$query-param'type'."\n\n"; if openF, 'logos/'.$query-param'image' local $/ =...
TWiki 4.2.2 - 'action' Remote Code Execution
-----------webDEViL - w3bd3vil at gmail dot com ----------- -----------TWiki Remote Code Execution header-type = $query-param'type'; So use this instead: print 'Content-type: '.$query-param'type'."\n\n"; if openF, 'logos/'.$query-param'image' local $/ = undef; print ; closeF;...
moziloCMS 1.10.1 (download.php) Arbitrary Download File Exploit
Exploit for unknown platform in category web applications =============================================================== moziloCMS 1.10.1 download.php Arbitrary Download File Exploit =============================================================== !/usr/bin/perl moziloCMS 1.10.1 Perl exploit...
Directory traversal
Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bit parameter, as demonstrated by an upload to avatar/ of a .jpg file containing PHP...
CVE-2008-3415
CVE-2008-3415 affects CMScout 2.05 (and related listings reference CMScout 2.06). The vulnerability is a directory traversal in common.php when .htaccess is not supported, allowing remote attackers to include and execute arbitrary local files through crafted directory traversal sequences in the b...