975 matches found
PHP PEAR 1.5.3 - INSTALL-AS Attribute Arbitrary File Overwrite
source: https://www.securityfocus.com/bid/24111/info PEAR is prone to a vulnerability that lets attackers overwrite arbitrary files. An attacker-supplied package may supply directory-traversal strings through the 'install-as' attribute to create and overwrite files in arbitrary locations. This...
XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- XAMPP for Windows = 1.6.0a adodb.php/mssqlconnect remote buffer overflow proof-of-concept exploit seh overwrite method / 2000 sp3 version mail: retrog at alice dot it...
XAMPP for Windows 1.6.0a - mssql_connect() Remote Buffer Overflow
XAMPP for Windows 1.6.0a - mssqlconnect Remote Buffer Overflow Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable"; ... mssqlconnect function is vulnerable to buffer overflow and the host argument is...
XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit
Exploit for unknown platform in category remote exploits ============================================================== XAMPP for Windows Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable";...
php security update
CentOS Errata and Security Advisory CESA-2007:0076 Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
phpmyprofilerRFI.txt
Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler 0.9.6 - Remote File Inclusion
phpMyProfiler 0.9.6 - Remote File Inclusion Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler <= 0.9.6 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================== phpMyProfiler = 0.9.6 Remote File Include Vulnerability ======================================================== phpMyProfiler Remote File Inclusion Vulnerability...
phpMyProfiler <= 0.9.6 Remote File Include Vulnerability
No description provided by source. Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
phpMyProfiler 0.9.6 - Remote File Inclusion
Author: [email protected] mozi phpMyProfiler Remote File Inclusion Vulnerability Greetz: Raver phpfreaks eu.undernet.org ------------------------------------------------------------------ Download: http://sourceforge.net/projects/phpmyprofiler...
php security update
CentOS Errata and Security Advisory CESA-2006:0669 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability
------------------------------------------------------------------------ ------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------ ------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll....
CentOS 3 / 4 : php (CESA-2005:748)
Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR XML-RP...
CentOS 3 / 4 : php (CESA-2005:564)
Updated PHP packages that fix two security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR...
V-Webmail <= 1.6.4 (pear_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== V-Webmail Vulnerable File v-webmail/includes/pear//.php = requireonce $CONFIG'peardir' . '.php'; v-webmail/includes/mailaccess/pop3.php = requireonce$CONFIG'peardir'...
FreeBSD : pear-PEAR -- PEAR installer arbitrary code execution vulnerability (44e5f5bd-4d76-11da-bf37-000fb586ba73)
Gregory Beaver reports : A standard feature of the PEAR installer implemented in all versions of PEAR can lead to the execution of arbitrary PHP code upon running the 'pear' command or loading the Web/Gtk frontend. To be vulnerable, a user must explicitly install a publicly released malicious...
FreeBSD : pear-XML_RPC -- remote PHP code injection vulnerability (e65ad1bf-0d8b-11da-90d0-00304823c0d3)
A Hardened-PHP Project Security Advisory reports : When the library parses XMLRPC requests/responses, it constructs a string of PHP code, that is later evaluated. This means any failure to properly handle the construction of this string can result in arbitrary execution of PHP code. This new...
GLSA-200603-13 : PEAR-Auth: Potential authentication bypass
The remote host is affected by the vulnerability described in GLSA-200603-13 PEAR-Auth: Potential authentication bypass Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact : A remote attacker could possibly exploit this vulnerabili...
PEAR-Auth: Potential authentication bypass
Background PEAR-Auth is a PEAR package that provides methods to create a PHP based authentication system. Description Matt Van Gundy discovered that PEAR-Auth did not correctly validate data passed to the DB and LDAP containers. Impact A remote attacker could possibly exploit this vulnerability t...
CVE-2005-4731
The Next action in PEAR HTMLQuickFormController 1.0.4 includes the SID in the URL even when session.useonlycookies is configured, which allows remote attackers to obtain the SID via an HTTP Referer field and possibly other vectors...