EUVD-2008-6915

Malware in sbrugna...

Code injection

Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from...

CVE-2008-6956

Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from...

CVE-2008-6955

mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini...

CVE-2008-6955

mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini...

CVE-2008-6955

mxCamArchive 2.2 exposes sensitive information under the web root due to insufficient access control, allowing remote attackers to obtain configuration details and passwords via a direct request to archive/config.ini. The connected sources confirm the vulnerability and its impact but do not provi...

CVE-2008-6956

CVE-2008-6956 affects mxCamArchive 2.2 in the admin/admin.php component. It is a static code injection vulnerability that allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, with execution triggered by index.php. The C...

CVE-2008-6955: Exposure of Sensitive Information to an Unauthorized Actor

mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini...

CVE-2008-6956: Improper Control of Generation of Code

Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from...

mxcamarchive-download.txt

Bypass Config Download Vulnerability script: mxcamarchive 2.2 download from:http://www.infireal.com/media/serve/106/mxcamarchive2.2.zip ........................................................................... expl: http://site.com/path/archive/config.ini and login http://site.com/path/admin an...

mxCamArchive 2.2 - Bypass Configuration Download

Bypass Config Download Vulnerability script: mxcamarchive 2.2 download from:http://www.infireal.com/media/serve/106/mxcamarchive2.2.zip ........................................................................... expl: http://site.com/path/archive/config.ini and login http://site.com/path/admin an...

mxCamArchive 2.2 Bypass Config Download Vulnerability

No description provided by source. Bypass Config Download Vulnerability script: mxcamarchive 2.2 download from:http://www.infireal.com/media/serve/106/mxcamarchive2.2.zip ........................................................................... expl: http://site.com/path/archive/config.ini and...

mxCamArchive 2.2 Bypass Config Download Vulnerability

Exploit for unknown platform in category web applications ===================================================== mxCamArchive 2.2 Bypass Config Download Vulnerability ===================================================== Bypass Config Download Vulnerability script: mxcamarchive 2.2 download...

mxCamArchive 2.2 - Bypass Configuration Download

mxCamArchive 2.2 - Bypass Configuration Download Bypass Config Download Vulnerability script: mxcamarchive 2.2 download from:http://www.infireal.com/media/serve/106/mxcamarchive2.2.zip ........................................................................... expl:...