150 matches found
In the PHP implementation of the system to external command-and-vulnerability warning-the black bar safety net
PHP as a server side scripting language, like writing a simple, or a complex dynamic web page such a task, it is fully able to do the job. But the thing is not always the case, sometimes in order to achieve a certain function, it must be by means of theoperating systemof the external program, or...
RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities
---------------------------------------------------------------------------------- - GroundZero Security Research and Software Development 2006 - ---------------------------------------------------------------------------------- - - - Security Advisory regarding RechnungsZentrale v2. - - SQL...
phpfm.txt
upload phpshell in PHPFM discovered by rUnViRuS www.worlddefacers.net www.security-arab.com =-=-=-=-=-=-=-=-= the code shell :- --------------- save as cmd.php now upload in PHPFM =-=-=-= Used Shell =-=-=-= www.site.com/file upload name/files/cmd.php?cmd=command linux...
CVE-2002-2104: Undefined Security Weakness
graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is provided to the passthru function...
CVE-2001-1020: Undefined Security Weakness
editimage.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfilename parameter, which is sent unfiltered to the PHP passthru function...
CVE-2001-1020
editimage.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfilename parameter, which is sent unfiltered to the PHP passthru function...
CVE-2000-0349
Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service...
CVE-2000-0349
The CVE-2000-0349 entry concerns SCO UnixWare 7.1.0, where the passthru driver is vulnerable to a denial of service. The connected sources confirm the affected product and the impact (DoS), but do not provide root-cause specifics, exploitation details, or a remediation/patch. No additional mitiga...