90 matches found
CVE-2010-4835
CVE-2010-4835 is a directory traversal vulnerability in OneOrZero AIMS 2.6.0 Members Edition. The flaw resides in index.php, where the controller parameter in a show_report action can be manipulated to read arbitrary files. This is a vulnerability in the web application that could allow remote au...
PT-2011-21: SQL injection vulnerability in OneOrZero AIMS
Positive Research Center has discovered multiply SQL injection vulnerabilities in OneOrZero AIMS. Application incorrectly validates input data. That allows attackers to conduct SQL injection attack. "SQL Injection" is a way to bypass network protection and attack the database. Settings transferre...
PT-2011-20: Authorization bypass vulnerability in OneOrZero AIMS
Positive Research Center has discovered authorization bypass vulnerability in OneOrZero AIMS. Vulnerability exists due incorrect logic of authorization using $COOKIE variables - predictable session value, stored in $COOKIE'oozimsrememberme' variable. Attacker, have valid username which registered...
OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities
Exploit for php platform in category web applications ============================================================== OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities ============================================================== :::::::::::::::::::::::::::::::::::::: 0x1...
OneOrZero AIMS 2.6.0 Members Edition Local File Inclusion / SQL Injection
Exploit Title: OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities Date: 13.11.2010 Author: Valentin Category: webapps/0day Version: 2.6.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Titl...
OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities
:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...
OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities
OneOrZero AIms 2.6.0 Members Edition - Multiple Vulnerabilities :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities Author = Valentin Hoebel Contact =...
CVE-2009-0886
Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the defaultlanguage parameter...
CVE-2009-0886
Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the defaultlanguage parameter...
CVE-2009-0886
The CVE corresponds to a local file inclusion (LFI) vulnerability in OneOrZero Helpdesk
OneOrZero Helpdesk 'login.php' Local File Include Vulnerability
OneOrZero Helpdesk is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks. OneOrZero...
OneOrZero Helpdesk default_language Local File Inclusion
The remote host is running OneOrZero Helpdesk, a web-based helpdesk application written in PHP. The version of OneOrZero Helpdesk installed on the remote host fails to filter input to the 'defaultlanguage' variable in the 'common/login.php' script before using it to include PHP code. Provided PHP...
OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion
OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: "OneOrZer...
OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: "OneOrZero Helpdesk and Task Management System is a powerfu...
OneOrZero Helpdesk <= 1.6.5.7 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================ OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability ================================================================ OneOrZero Helpdesk = 1.6.5.7 Local File...
OneOrZero Helpdesk <= 1.6.5.7 Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: "OneOrZero Helpdesk and...
OneOrZero Helpdesk 1.6.5.7 Local File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: "OneOrZero Helpdesk and Task Management System is a powerfu...
OneOrZero Helpdesk 1.6 Shell Upload Exploit
!/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: In 'tinfo.php' script there are function named uploadAttachment through which we are able to upload files. It does not checks what the file is uploaded. EXPLOIT WORK:...
OneOrZero Helpdesk tinfo.php Arbitrary File Upload
Binary data 4801.prm...
OneOrZero Helpdesk tinfo.php Arbitrary File Upload
The remote host is running OneOrZero Helpdesk, a web-based helpdesk application written in PHP. The version of OneOrZero HelpDesk installed on the remote host allows uploads of arbitrary files via the 'tinfo.php' script provided the 'sendemail' POST parameter is set. By uploading a file with, say...