EUVD-2006-4200

Malware in sbrugna...

phPay <= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit

No description provided by source. !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford xbefordx gmail com Vulnerability: mail Injection Vuln Code: ?php if eregnumail.inc.php, $SCRIPTNAME headerLocation:./index.html; elseif eregnumail.inc.php,...

phPay &lt;= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit

No description provided by source. !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford xbefordx gmail com Vulnerability: mail Injection Vuln Code: ?php if ereg"numail.inc.php", $SCRIPTNAME header"Location:./index.html"; elseif...

CVE-2006-4210

CVE-2006-4210 describes a vulnerability in nu_mail.inc.php of Andreas Kansok’s phPay 2.02/2.02.1 where, if register_globals is enabled, a remote attacker can abuse the server as an open mail relay via manipulated parameters (mail_text2, user_row[5], nu_mail_1, shop_mail). The root cause is improp...

CVE-2006-4210: Undefined Security Weakness

numail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when registerglobals is enabled, allows remote attackers to use the server as an open mail relay via modified mailtext2, userrow5, numail1, and shopmail parameters. NOTE: some of these details are obtained from third party information...

PHPay 2.02 - nu_mail.inc.php?mail() Remote Injection

PHPay 2.02 - numail.inc.php?mail Remote Injection !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed...

PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection

!/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print...

phPay <= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit

Exploit for unknown platform in category web applications =============================================================== phPay \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print "\theaders :...