EUVD-2008-4761

Malware in sbrugna...

EUVD-2008-6243

Malware in sbrugna...

EUVD-2008-6775

Malware in sbrugna...

CVE-2008-6815

mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct request, and then sending an unspecified request to the download page for the backup...

CVE-2008-6815

The CVE-2008-6815 entry concerns MyKtools 2.4, where mykdownload.php does not require administrative authentication, enabling remote attackers to read a database backup by making a direct request and then accessing the download page. The public documents confirm the affected component and the roo...

CVE-2008-6273

Directory traversal vulnerability in configurationscript.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the langage parameter, a different vulnerability than CVE-2008-4781. NOTE: the provenance of this information is...

Directory traversal

Directory traversal vulnerability in configurationscript.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the langage parameter, a different vulnerability than CVE-2008-4781. NOTE: the provenance of this information is...

CVE-2008-6273

Directory traversal vulnerability in configurationscript.php in MyKtools 3.0 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the langage parameter, a different vulnerability than CVE-2008-4781. NOTE: the provenance of this information is...

CVE-2008-6273

CVE-2008-6273 affects MyKtools 3.0; a directory traversal vulnerability exists in configuration_script.php that permits remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the langage parameter. This is a separate issue from CVE-2008-4781. The NV...

CVE-2008-4781

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langage parameter...

Directory traversal

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langage parameter...

CVE-2008-4781

A CVE-2008-4781 entry concerns a directory traversal in update.php of MyKtools 2.4. The vulnerability allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the langage parameter, enabling local file inclusion and potential code execution. The affected componen...

CVE-2008-4781

Directory traversal vulnerability in update.php in MyKtools 2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langage parameter...

MyKtools 2.4 (langage) Local File Inclusion Vulnerability

No description provided by source. Autor: x0r Email: evolutionteam.x0atgmaildotcom Download: http://www.easy-script.com/scripts-dl/MyKtools-v2-4.zip Bug: LFI Bug: In \update.php // Include du fichier langue if $GET'langage' $langue = $GET'langage'; include "lang/".$langue.".php"; Exploit:...

MyKtools 2.4 Arbitrary Database Backup Vulnerability

No description provided by source. MyKtools 2.4 Arbitrary Database Backup Vulnerability By : Mountassif Moad Exploit: http://localhost/mykdownload.php after you get the page for download the backup...

MyKtools 2.4 - Arbitrary Database Backup

MyKtools 2.4 - Arbitrary Database Backup MyKtools 2.4 Arbitrary Database Backup Vulnerability By : Mountassif Moad Exploit: http://localhost/mykdownload.php after you get the page for download the backup milw0rm.com 2008-10-27...

MyKtools 2.4 - Arbitrary Database Backup

MyKtools 2.4 Arbitrary Database Backup Vulnerability By : Mountassif Moad Exploit: http://localhost/mykdownload.php after you get the page for download the backup milw0rm.com 2008-10-27...

MyKtools 2.4 - langage Local File Inclusion

MyKtools 2.4 - langage Local File Inclusion Autor: x0r Email: evolutionteam.x0atgmaildotcom Download: http://www.easy-script.com/scripts-dl/MyKtools-v2-4.zip Bug: LFI Bug: In \update.php // Include du fichier langue if $GET'langage' $langue = $GET'langage'; include "lang/".$langue.".php"; Exploit...

myktools-lfi.txt

Autor: x0r Email: evolutionteam.x0atgmaildotcom Download: http://www.easy-script.com/scripts-dl/MyKtools-v2-4.zip Bug: LFI Bug: In \update.php // Include du fichier langue if $GET'langage' $langue = $GET'langage'; include "lang/".$langue.".php"; Exploit:...

MyKtools 2.4 - 'langage' Local File Inclusion

Autor: x0r Email: evolutionteam.x0atgmaildotcom Download: http://www.easy-script.com/scripts-dl/MyKtools-v2-4.zip Bug: LFI Bug: In \update.php // Include du fichier langue if $GET'langage' $langue = $GET'langage'; include "lang/".$langue.".php"; Exploit:...