Solaris 5.7 (x86) : 111963-04

Solstice Backup 6.1x86: Product Patch. Date this patch was last updated by Sun : Jan/06/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.6 (x86) : 111963-04

Solstice Backup 6.1x86: Product Patch. Date this patch was last updated by Sun : Jan/06/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

PT-2007-3204 · 2Bgal · 2Bgal

Name of the Vulnerable Software and Affected Versions: 2BGal version 3.1.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the lang filename parameter to 1 "index.php" or 2 "backupdb.inc.php" in admin/, or other unspecified files. Recommendations: For 2BG...

TestDirector (TD) for Mercury Quality Center SPIDERLib.Loader ActiveX Control (Spider90.ocx) ProgColor Property Overflow

The Windows remote host contains an ActiveX control used by Mercury Quality Center, a web-based solution for automatic software testing. The version of this ActiveX control on the remote host reportedly contains a buffer overflow vulnerability in its 'ProgColor' property. By setting the property ...

CVE-2007-1801: Undefined Security Weakness

Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files via a .. dot dot in the conflangdefault parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by...

CVE-2006-7182: Undefined Security Weakness

PHP remote file inclusion vulnerability in noticias.php in MNews 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

CVE-2007-1539: Undefined Security Weakness

Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to include arbitrary files via a .. dot dot sequence in the modulename parameter, as demonstrated via a static PHP code injection attack in an Apache log file...

ClipShare ADODB-Connection.Inc.PHP远程文件包含漏洞

ClipShare是一款基于PHP的WEB应用程序。 ClipShare不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'ADODB-Connection.Inc.PHP'脚本对用户提交的'cmd'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 ClipShare 1.5.3 目前没有解决方案提供： http://www.clip-share.com/ http://www.example.com/Path/include/adodb-connection.inc.php?cmd=Shell-Attack...

Use google to carry out penetration testing-vulnerability warning-the black bar safety net

Today we are penetration testers in the implementation of the attack before, often the first information-gathering, which is the vulnerability is confirmed and the final exploits, expanding the war fruit. Here we are now going to talk about is: One, use google to find is people who installed a ph...

CVE-2007-1167: Exposure of Sensitive Information to an Unauthorized Actor

inc/filebrowser/browser.php in deV!Lz Clanportal DZCP 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter...

CVE-2007-1097: Improper Input Validation

Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool inc/lib/attachment.lib.php in Wiclear before 0.11.1 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to filename validation. NOTE: some details were obtained fro...

CVE-2007-1079

CVE-2007-1079 describes a stack-based buffer overflow in Rhino Software, Inc. FTP Voyager (versions 14.0.0.3 and earlier) during server response handling to a CWD command. A long response can overflow the stack when the user aborts the command, enabling a remote attacker to trigger a crash (DoS)....

CVE-2007-1025: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/functionsinc.php in VS-Link-Partner 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad, or possibly scriptpfad, parameter...

Solaris 10 (x86) : 125012-01

SunOS 5.10x86: sendmail patch. Date this patch was last updated by Sun : Jan/29/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

WebTester 5.0.2 sql injection and XSS vulnerabilities

Application: WebTester Web Site: http://www.webtester.us/ Versions: 5.0.20060927 and below Platform: linux, windows, freebsd, sun Bug: Cross Site Scripting and SQL Injection Severity: high Fix Available: No ------------------------------------------------------- 1 Introduction 2 Bug 3 The Code 4...

CVE-2007-0880: Undefined Security Weakness

Capital Request Forms stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for inc/commondb.inc...

CVE-2007-0837: Undefined Security Weakness

PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter...

XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln.

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ Title : XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln. $ Author : Gokhan $ Site : http://www.xlnc1.org/nuke $ Contact : [email protected] | [email protected] $ $ Vuln Code : iframe.php $ $...

xlnc-rfi.txt

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ Title : XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln. $ Author : Gokhan $ Site : http://www.xlnc1.org/nuke $ Contact : [email protected] | [email protected] $ $ Vuln Code : iframe.php $ $...

Epistemon Common.Inc.PHP远程文件包含漏洞

Epistemon是一款基于PHP的WEB应用程序。 Epistemon不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Common.Inc.PHP'脚本对用户提交的'incpath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Epistemon 1.0 目前没有解决方案提供,请关注以下链接： http://www.homelocate.ca/listing/listing.php...