5978 matches found
PHPGlossar Format_Menue远程文件包含漏洞
PHPGlossar是一款基于PHP的WEB应用程序。 PHPGlossar不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'formatmenue'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 PHPGlossar 0.8 目前没有解决方案提供： http://www.crear.de/2003/dienste/phpdownloadlinks0.6/loadpage.php?uid=7...
OS Identification : SNMP
Nessus was able to identify the operating system type and version by examining the SNMP data returned by the remote server. C Tenable, Inc. Nessus was able to identify the operating system type and version by examining the SNMP data returned by the remote server. include"compat.inc"; if descripti...
PHPGlossar 0.8 (format_menue) Remote File Inclusion Vulnerabilities
No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...
CVE-2007-2751: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the formatmenue parameter to 1 admin/inc/changeaction.php or 2 admin/inc/add.php...
libpng denial of service vulnerability
Overview The libpng library contains a denial-of-service vulnerability. Description The libpng library can be used to allow other applications to render PNG images.The libpng library contains a denial-of-service vulnerability. From the Libpng-1.2.16-ADVISORY: This vulnerability could be used to...
PHPGlossar 0.8 (format_menue) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== PHPGlossar 0.8 formatmenue Remote File Inclusion Vulnerabilities =================================================================== ?????????? ???????????????...
PHPGlossar 0.8 - format_menue Remote File Inclusion
PHPGlossar 0.8 - formatmenue Remote File Inclusion ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...
CVE-2007-0689: Undefined Security Weakness
MyBB 1.2.4 allows remote attackers to obtain sensitive information via the 1 action parameter to member.php, 2 imagehash parameter to captcha.php, and 3 a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message...
Samba NDR MS-RPC heap buffer overflow
Overview Samba fails to properly handle malformed MS-RPC packets. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code. Description Samba is a widely used open-source implementation of Server Message Block SMB/Common Internet File System CIFS. Network Data...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code via a URL in the pathCGX parameter to 1 mtdialogo.php, 2 ltdialogo.php, 3 login.php, and 4 logingecon.php in inc/; and multiple unspecified files in frm/, sql/, and cns/...
CVE-2007-2594: Undefined Security Weakness
PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSCHEMINMODULES parameter...
CVE-2007-2620: Undefined Security Weakness
PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner aka jimmac original 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the x1 parameter...
Enumerate IPv4 Interfaces via SSH
Nessus was able to enumerate the network interfaces configured with IPv4 addresses by connecting to the remote host via SSH using the supplied credentials. TRUSTED...
CVE-2007-2340
CVE-2007-2340 involves multiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php of phporacleview. An attacker can supply a URL in the parameters (1) page_dir or (2) inc_dir) to cause arbitrary PHP code execution on the affected system. The NVD listing notes a base score of 6....
CVE-2007-2326: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP code via a URL in the pluginfile parameter to 1 Smarty.class.php and 2 SmartyCompiler.class.php in inc/libs/; 3 core.displaydebugconsole.php, 4 core.loadplugins.php, 5...
CVE-2007-2340: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in inc/includeall.inc.php in phporacleview allow remote attackers to execute arbitrary PHP code via a URL in the 1 pagedir or 2 incdir parameters...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board GPB unstable-2001.11.14-1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 db.mysql.inc.php or 2 gpb.inc.php in include/, or the 3 theme parameter to themes/ubb/login.php...
OpenSurveyPilot Group.Inc.PHP远程文件包含漏洞
OpenSurveyPilot是一款基于PHP的WEB应用程序。 OpenSurveyPilot不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Group.Inc.PHP'脚本对用户提交的'cfgPathToProjectAdmin'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 OpenSurveyPilot 1.2.1 目前没有解决方案提供： http://sourceforge.net/projects/osp/...
