CVE-2007-3313

Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter to login.php or 2 the item parameter to news.php...

CVE-2007-3313

Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter to login.php or 2 the item parameter to news.php...

CVE-2007-3312

Directory traversal vulnerability in admin/pluginmanager.php in Jasmine CMS 1.0 allows remote authenticated administrators to include and execute arbitrary local files a .. dot dot in the u parameter. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote...

CVE-2007-3313

CVE-2007-3313 involves two SQL injection vulnerabilities in Jasmine CMS 1.0 that allow remote attackers to execute arbitrary SQL commands via (1) login.php’s login_username and (2) news.php’s item parameter. The associated CVSS v2 base score is 7.5 (HIGH) with vector AV:N/AC:L/Au:N/C:P/I:P/A:P, i...

CVE-2007-3312

The CVE-2007-3312 entry describes a directory traversal vulnerability in Jasmine CMS 1.0 affecting the file admin/plugin_manager.php . The issue allows (for vulnerable configurations) remote authenticated administrators to include and execute arbitrary local files via the parameter u (dot-dot tra...

Jasmine CMS 1.0 - SQL Injection Remote Code Execution

Jasmine CMS 1.0 - SQL Injection Remote Code Execution !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " Jasmine CMS 1.0 SQL...

Jasmine CMS 1.0 SQL Injection/Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " Jasmine CMS 1.0 SQL Injection/Remote Co...

jasmine-exec.txt

!/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " Jasmine CMS 1.0 SQL Injection/Remote Code Execution Exploit\r\n"; print...

Jasmine CMS 1.0 SQL Injection/Remote Code Execution Exploit

Exploit for unknown platform in category web applications =========================================================== Jasmine CMS 1.0 SQL Injection/Remote Code Execution Exploit =========================================================== !/usr/bin/php -q -d shortopentag=on ?php errorreporting0;...

Jasmine CMS 1.0 - SQL Injection / Remote Code Execution

!/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " Jasmine CMS 1.0 SQL Injection/Remote Code Execution Exploit\r\n"; print...

CVE-2006-5318

PHP remote file inclusion vulnerability in index.php in Nayco JASmine aka Jasmine-Web allows remote attackers to execute arbitrary PHP code via an FTP URL in the section parameter...

CVE-2006-5318

CVE-2006-5318 (Nayco JASmine / Jasmine-Web) is a PHP remote file inclusion flaw in index.php that allows an attacker to execute arbitrary PHP code by supplying an FTP URL in the section parameter. The vulnerability arises from improper handling of user-supplied input and can enable code execution...

phpIncludes.txt

Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...

7 php scripts File Inclusion / Source disclosure Vuln

Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...

JASmine <= 0.0.2 (index.php) Remote File Include Vulnerability

No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...

JASmine 0.0.2 - index.php Remote File Inclusion

JASmine 0.0.2 - index.php Remote File Inclusion Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational...

JASmine <= 0.0.2 (index.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== JASmine = 0.0.2 index.php Remote File Include Vulnerability ============================================================== Title..: 7 php scripts File Inclusion Vuln / Source...

JASmine 0.0.2 - 'index.php' Remote File Inclusion

Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...