CVE-2007-3620

Multiple directory traversal vulnerabilities in Maia Mailguard 1.0.2 and earlier might allow remote attackers to read arbitrary files via a .. dot dot in the 1 prevlang and 2 super parameters to a php/login.php; the 3 charset parameter to a php/login.php, b php/internal-init.php, and c...

CVE-2007-3619

Directory traversal vulnerability in login.php in Maia Mailguard 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

CVE-2007-3619

Maia Mailguard 1.0.2 and earlier contain a directory traversal (local file inclusion) in login.php, exploitable via .. in the lang parameter to read arbitrary files or potentially run PHP code. Affected component: login.php; vulnerability type: LFI via unsanitized lang input. Root cause: improper...

CVE-2007-3620

The vulnerability is in Maia Mailguard 1.0.2 and earlier, with multiple directory traversal weaknesses exposing the ability to read arbitrary files. The affected components are PHP scripts: login.php (parameters prevlang, super, charset), internal-init.php (charset, lang), and xlogin.php (charset...

Netragard Security Advisory 2007-06-28

NETRAGARD ADVISORY http://www.netragard.com "We make IT Safe" Advisory Summary ----------------------------------------------------------------------- Advisory Author : Adriel T. Desautels Advisory ID : NETRAGARD-20070628 Product Name : Maia Mailguard Product Version : = 1.0.2 All Platforms Vendo...

Maia Mailguard login.php lang Parameter Local File Inclusion

The remote host is running Maia Mailguard, a spam and virus management system written in PHP. The version of Maia Mailguard installed on the remote host fails to sanitize user input to the 'lang' parameter before using it to include PHP code in 'login.php'. Regardless of PHP's 'registerglobals'...

[NETRAGARD SECURITY ADVISORY][Maia Mailguard 1.0.2 Arbitrary Code Execution][NETRAGARD-20070628]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NETRAGARD ADVISORY http://www.netragard.com "We make IT Safe" Advisory Summary - ----------------------------------------------------------------------- Advisory Author : Adriel T. Desautels Advisory ID : NETRAGARD-20070628 Product Name : Maia Mailgua...

Maia Mailguard 1.0.2 - 'login.php' Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/24770/info Maia Mailguard is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an unauthorized user to view files and execute local scripts. These issues affec...

Maia Mailguard 1.0.2 - login.php Multiple Local File Inclusions

Maia Mailguard 1.0.2 - login.php Multiple Local File Inclusions source: https://www.securityfocus.com/bid/24770/info Maia Mailguard is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an unauthorized...