PHPbbBook 1.3 (bbcode.php l) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================= PHPbbBook 1.3 bbcode.php l Local File Inclusion Exploit ========================================================= !/usr/bin/perl...

PHPbbBook 1.3 - bbcode.php?l Local File Inclusion

PHPbbBook 1.3 - bbcode.php?l Local File Inclusion !/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = PHPbbBook 1.3 Downl =...

PHPbbBook 1.3 - 'bbcode.php?l' Local File Inclusion

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = PHPbbBook 1.3 Downl = http://phpbbbook.syssap.nl/downloads/PHPbbBook-1.3h.zip Remote Command Execution...

util-linux: audit log injection via login

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

Ultimate PHP Board 2.2.1 Privilege Escalation

!/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + localhost". "\nPath + forum path /upb". "\nID + your user ID". "\nEmail + your/any email\n"; exit...

Ultimate PHP Board 2.2.1 - Privilege Escalation

Ultimate PHP Board 2.2.1 - Privilege Escalation !/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + localhost". "\nPath + forum path /upb". "\nID +...

DTSA-126-1 util-linux - log injection

Bulletin has no description...

Fedora 8 : util-linux-ng-2.13.1-2.fc8 (2008-3419)

Tue Apr 22 2008 Karel Zak 2.13.1-2 - fix audit log injection attack via login - Wed Jan 16 2008 Karel Zak 2.13.1-1 - upgrade to stable util-linux-ng 2.13.1 - fix 427874 - util-linux-ng gets 'excess command line argument' on update - Thu Jan 3 2008 Karel Zak 2.13-3.2 - fix 427207 -...

util-linux-ng登录远程日志注入漏洞

BUGTRAQ ID: 28983 CVECAN ID: CVE-2008-1926 util-linux-ng是增强版本的Util-linux软件包，包含有多种linux工具和应用。 util-linux-ng软件包的login.c在记录登录尝试时存在参数注入漏洞，远程攻击者可以在登录名称中添加addr=语句在审计日志中修改部分日志事件，从而隐藏其登录尝试等行为。 Karel Zak util-linux-ng 2.13.1.1 Karel Zak --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

DEBIAN-CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

Motorola Timbuktu Pro 8.6.5/8.7 Path Traversal / Log Injection Exploit

No description provided by source. Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204 Advisory URL: http://www.coresecurity.com/?action=item&id=2166 Date published: 2008-03-11...

Core Security Technologies Advisory 2008.0204

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Timbuktu Pro Remote Path Traversal and Log Injection Advisory Information Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204...

CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Timbuktu Pro Remote Path Traversal and Log Injection Advisory Information Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204...

Motorola Timbuktu Pro 8.6.58.7 - Directory Traversal Log Injection

Motorola Timbuktu Pro 8.6.58.7 - Directory Traversal Log Injection Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204 Advisory URL:...

Motorola Timbuktu Pro 8.6.5/8.7 Path Traversal / Log Injection Exploit

Exploit for unknown platform in category remote exploits ====================================================================== Motorola Timbuktu Pro 8.6.5/8.7 Path Traversal / Log Injection Exploit ====================================================================== Core Security Technologies ...

Timbuktu Pro Remote Path Traversal and Log Injection

Timbuktu Pro Remote Path Traversal and Log Injection Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs-research Advisory Information Title: Timbuktu Pro Remote Path Traversal and Log Injection Advisory ID: CORE-2008-0204 Advisory URL:...