Free Arcade Script 1.0 - Local File Inclusion Command Execution

Free Arcade Script 1.0 - Local File Inclusion Command Execution !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Free Arcade Script 1.0 LFI Command Execution Exploit

Exploit for unknown platform in category web applications ==================================================== Free Arcade Script 1.0 LFI Command Execution Exploit ==================================================== !/usr/bin/perl...

Pyrophobia 2.1.3.1 - Local File Inclusion Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Free Arcade Script 1.0 - Local File Inclusion Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

PHPbbBook 1.3 (bbcode.php l) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ========================================================= PHPbbBook 1.3 bbcode.php l Local File Inclusion Exploit ========================================================= !/usr/bin/perl...

PHPbbBook 1.3 - bbcode.php?l Local File Inclusion

PHPbbBook 1.3 - bbcode.php?l Local File Inclusion !/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = PHPbbBook 1.3 Downl =...

PHPbbBook 1.3 Local File Inclusion

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = PHPbbBook 1.3 Downl = http://phpbbbook.syssap.nl/downloads/PHPbbBook-1.3h.zip Remote Command Execution...

PHPbbBook 1.3 - 'bbcode.php?l' Local File Inclusion

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = PHPbbBook 1.3 Downl = http://phpbbbook.syssap.nl/downloads/PHPbbBook-1.3h.zip Remote Command Execution...

util-linux: audit log injection via login

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

Ultimate PHP Board 2.2.1 Privilege Escalation

!/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + localhost". "\nPath + forum path /upb". "\nID + your user ID". "\nEmail + your/any email\n"; exit...

Ultimate PHP Board 2.2.1 - Privilege Escalation

Ultimate PHP Board 2.2.1 - Privilege Escalation !/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + localhost". "\nPath + forum path /upb". "\nID +...

CVE-2008-3596: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Harmoni before 1.4.7 allows remote attackers to inject arbitrary web script or HTML via the Username field, which is inserted into logs that could be rendered when viewed by an administrator...

DTSA-126-1 util-linux - log injection

Bulletin has no description...

Fedora 8 : util-linux-ng-2.13.1-2.fc8 (2008-3419)

Tue Apr 22 2008 Karel Zak 2.13.1-2 - fix audit log injection attack via login - Wed Jan 16 2008 Karel Zak 2.13.1-1 - upgrade to stable util-linux-ng 2.13.1 - fix 427874 - util-linux-ng gets 'excess command line argument' on update - Thu Jan 3 2008 Karel Zak 2.13-3.2 - fix 427207 -...

util-linux-ng登录远程日志注入漏洞

BUGTRAQ ID: 28983 CVECAN ID: CVE-2008-1926 util-linux-ng是增强版本的Util-linux软件包，包含有多种linux工具和应用。 util-linux-ng软件包的login.c在记录登录尝试时存在参数注入漏洞，远程攻击者可以在登录名称中添加addr=语句在审计日志中修改部分日志事件，从而隐藏其登录尝试等行为。 Karel Zak util-linux-ng 2.13.1.1 Karel Zak --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

DEBIAN-CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...