EUVD-2008-6243

Malware in sbrugna...

EUVD-2008-6775

Malware in sbrugna...

EUVD-2008-4761

Malware in sbrugna...

CVE-2008-6815

mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct request, and then sending an unspecified request to the download page for the backup...

CVE-2008-6815

The CVE-2008-6815 entry concerns MyKtools 2.4, where mykdownload.php does not require administrative authentication, enabling remote attackers to read a database backup by making a direct request and then accessing the download page. The public documents confirm the affected component and the roo...

CVE-2008-6815: Improper Authentication

mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct request, and then sending an unspecified request to the download page for the backup...

Directory traversal

Directory traversal vulnerability in configurationscript.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the langage parameter, a different vulnerability than CVE-2008-4781. NOTE: the provenance of this information is...

CVE-2008-6273

Directory traversal vulnerability in configurationscript.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the langage parameter, a different vulnerability than CVE-2008-4781. NOTE: the provenance of this information is...

CVE-2008-6273

Directory traversal vulnerability in configurationscript.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the langage parameter, a different vulnerability than CVE-2008-4781. NOTE: the provenance of this information is...

CVE-2008-6273

CVE-2008-6273 affects MyKtools 3.0; a directory traversal vulnerability exists in configuration_script.php that permits remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the langage parameter. This is a separate issue from CVE-2008-4781. The NV...

CVE-2008-6273: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in configurationscript.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the langage parameter, a different vulnerability than CVE-2008-4781. NOTE: the provenance of this information is...

CVE-2008-4781

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langage parameter...

Directory traversal

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langage parameter...

CVE-2008-4781

A CVE-2008-4781 entry concerns a directory traversal in update.php of MyKtools 2.4. The vulnerability allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langage parameter, enabling local file inclusion and potential code execution. The affected componen...

CVE-2008-4781

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langage parameter...

CVE-2008-4781: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langage parameter...

MyKtools 2.4 (langage) Local File Inclusion Vulnerability

No description provided by source. Autor: x0r Email: evolutionteam.x0atgmaildotcom Download: http://www.easy-script.com/scripts-dl/MyKtools-v2-4.zip Bug: LFI Bug: In \update.php // Include du fichier langue if $GET'langage' $langue = $GET'langage'; include "lang/".$langue.".php"; Exploit:...

MyKtools 2.4 Arbitrary Database Backup Vulnerability

No description provided by source. MyKtools 2.4 Arbitrary Database Backup Vulnerability By : Mountassif Moad Exploit: http://localhost/mykdownload.php after you get the page for download the backup...

myktools-lfi.txt

Autor: x0r Email: evolutionteam.x0atgmaildotcom Download: http://www.easy-script.com/scripts-dl/MyKtools-v2-4.zip Bug: LFI Bug: In \update.php // Include du fichier langue if $GET'langage' $langue = $GET'langage'; include "lang/".$langue.".php"; Exploit:...

MyKtools 2.4 - Arbitrary Database Backup

MyKtools 2.4 Arbitrary Database Backup Vulnerability By : Mountassif Moad Exploit: http://localhost/mykdownload.php after you get the page for download the backup milw0rm.com 2008-10-27...