CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies

Document Title: =============== CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=726 Release Date: ============= 2012-10-18 Vulnerability Laboratory ID VL-ID: ==================================== 726 Common...

CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies

Document Title: =============== CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=726 Release Date: ============= 2012-10-18 Vulnerability Laboratory ID VL-ID: ==================================== 726 Common...

Omnistar Document Manager 8.0 - Multiple Vulnerabilities

Omnistar Document Manager 8.0 - Multiple Vulnerabilities Title: ====== Omnistar Document Manager v8.0 - Multiple Vulnerabilities Date: ===== 2012-10-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=712 VL-ID: ===== 712 Common Vulnerability Scoring System:...

Omnistar Document Manager 8.0 LFI / XSS / SQL Injection

Title: ====== Omnistar Document Manager v8.0 - Multiple Vulnerabilities Date: ===== 2012-10-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=712 VL-ID: ===== 712 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: =============...

Omnistar Document Manager 8.0 - Multiple Vulnerabilities

Title: ====== Omnistar Document Manager v8.0 - Multiple Vulnerabilities Date: ===== 2012-10-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=712 VL-ID: ===== 712 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: =============...

CVE-2009-5067

Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. dot dot in the "include file" SSI directive. NOTE: this issue only might be a vulnerability in limited scenarios, such as if html2ps is invoked by a web application, or if a...

PT-2012-1276 · Html2Ps · Html2Ps

Name of the Vulnerable Software and Affected Versions: html2ps versions prior to 1.0b6 Description: The issue allows remote attackers to read arbitrary files via a .. dot dot in the include file SSI directive. This might be a problem in limited scenarios, such as if html2ps is invoked by a web...

TECNO DYNAMICS - Sql injection / Local File Include Vulnerabilities

Exploit for php platform in category web applications Exploit Title: TECNO DYNAMICS - SQL INJECTION & LFI Date: 08/10/2012 Author: k2ll33d Vendor : http://www.tecnoglobal.com/ Version: N/A Category: webapps Google dork: "inurl:templatehome.php4 intext:Todos los Derechos Reservados" vuln: SQLI...

Open Realty - select_users_lang Local File Inclusion

Open Realty - selectuserslang Local File Inclusion source: https://www.securityfocus.com/bid/55834/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

Open Realty - 'select_users_lang' Local File Inclusion

source: https://www.securityfocus.com/bid/55834/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts i...

phpMyChat Plus 1.94 RC1 LFI / XSS / RFI / SQL Injection

Exploit Title: phpMyChat Plus v1.94 RC1 Multiple Remote Vulnerabilities Date: 04/10/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://sourceforge.net/projects/phpmychat/ Software Link:...

Omnistar Document Manager v8.0 - Multiple Vulnerabilities

Document Title: =============== Omnistar Document Manager v8.0 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=712 Release Date: ============= 2012-10-02 Vulnerability Laboratory ID VL-ID: ==================================== 7...

Omnistar Document Manager v8.0 - Multiple Vulnerabilities

Document Title: =============== Omnistar Document Manager v8.0 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=712 Release Date: ============= 2012-10-02 Vulnerability Laboratory ID VL-ID: ==================================== 7...

php execution vulnerability parsing-vulnerability warning-the black bar safety net

A code to perform the function In PHP you can execute the Code of the function. Such as eval , assert , the“and system and exec and shellexec and passthru and escapeshellcmd and pcntlexec , etc. demo code 1.1: ? php echo dir; ?& gt; The second file contains the code injection The file containing...

php file include vulnerability solution-exploits warning-the black bar safety net

Now the program code is written more and more strange, it is a file that contains the code you can write 2 ways: require the include Be the first to say require if error then terminate the output and include if error then continue execution. If a website Management User write in auth. php, and...

Wiki Web Help <= 0.3.11 RFI Vulnerability - Active Check

Wiki Web Help is prone to a remote file include RFI vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PT-2012-4759

Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.2 Citrix XenServer version 6.0.2 and earlier Description The issue allows local OS guest users to cause a denial of service by writing to the reserved bits of the DR7 debug control register. This is possible through...

PT-2012-2013

Name of the Vulnerable Software and Affected Versions e107 versions prior to 0.7.26 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the user include parameter...

PT-2012-1040

Name of the Vulnerable Software and Affected Versions libxml2 versions 2.9.0-rc1 and earlier Google Chrome versions prior to 21.0.1180.89 Description The issue is related to the handling of XSL transforms and the xmlNs data structure in include/libxml/tree.h. It allows remote attackers to cause a...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSgcampsiteDir parameter to 1 include/phorumload.php, 2 conf/installconf.php, or 3...