6 matches found
CVE-2008-4687-exploit
CVE-2008-4687-exploit CVE-2008-4687 用の手早い雑な Python エクスプロイト。 NIST による説明: Mantis 1.1.4 より前の manageprojpage.php では、リモートの認証済みユーザーが sort パラメータに PHP シーケンスを含めることで任意のコードを実行でき、これらのシーケンスは core/utilityapi.php の multisort 関数内の createfunction によって処理されます。...
Mantis Bug Tracker <= 1.1.3 - Remote Code Execution Exploit
No description provided by source. ?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX...
Design/Logic Flaw
manageprojpage.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by createfunction within the multisort function in core/utilityapi.php...
CVE-2008-4687
manageprojpage.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by createfunction within the multisort function in core/utilityapi.php...
CVE-2008-4687: Improper Control of Generation of Code
manageprojpage.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by createfunction within the multisort function in core/utilityapi.php...
Mantis Bug Tracker <= 1.1.3 Remote Code Execution Exploit
No description provided by source. ?php / -------------------------------------------------------------------------------- Mantis Bug Tracker = 1.1.3 manageprojpage.php Remote Code Execution Exploit -------------------------------------------------------------------------------- author...: EgiX...