186 matches found
PHP Remote File Inclusion
Added: 01/28/2010 Background PHP scripts support the include and require statements, which cause an outside script to be run within the calling script. The included script can be a local file or, in some configurations, the URL of a remote file. Problem The PHP script is vulnerable to a remote fi...
Citrix XenCenterWeb (XSS/SQL/RCE) Multiple Remote Vulnerabilities
No description provided by source. Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero...
citrix xencenterweb - Cross-Site Scripting / SQL Injection / Remote Code Execution
Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...
Citrix XenCenterWeb (XSS/SQL/RCE) Multiple Remote Vulnerabilities
Exploit for windows platform in category remote exploits ================================================================= Citrix XenCenterWeb XSS/SQL/RCE Multiple Remote Vulnerabilities ================================================================= Secure Network - Security Research Advisory...
Citrix XenCenterWeb Multiple Vulnerabilities
Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...
Citrix XenCenterWeb XSS / XSRF / SQL Injection
Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...
Leap CMS Multiple remote vulnerabilities
The remote Leap CMS is affected to multiple remote vulnerabilities. Leap is a single file, template independent, PHP and MySQL Content Management System. OpenVAS Vulnerability Test $Id: remote-LeapCMSmulti.nasl 6520 2017-07-04 14:28:49Z cfischer $ Description: This script multiple remote...
Flatnux 2009-03-27 (Upload/ID) Multiple Remote Vulnerabilities
No description provided by source. Author: girex Homepage: girex.altervista.org Date: 17/04/2009 CMS: flatnux-2009-03-27 site: flatnux.altervista.org Bugs: Multiple remote vulnerabilities Flatnux suffers of multiple local file inclusions: output of my scanner Line: 10 File:...
Flatnux 2009-03-27 - Arbitrary File Upload Information Disclosure
Flatnux 2009-03-27 - Arbitrary File Upload Information Disclosure Author: girex Homepage: girex.altervista.org Date: 17/04/2009 CMS: flatnux-2009-03-27 site: flatnux.altervista.org Bugs: Multiple remote vulnerabilities Flatnux suffers of multiple local file inclusions: output of my scanner Line: ...
Flatnux 2009-03-27 - Arbitrary File Upload / Information Disclosure
Author: girex Homepage: girex.altervista.org Date: 17/04/2009 CMS: flatnux-2009-03-27 site: flatnux.altervista.org Bugs: Multiple remote vulnerabilities Flatnux suffers of multiple local file inclusions: output of my scanner Line: 10 File: D:/xampp/htdocs/flat/flatnux/sections/00News/admin.php...
PHP. ini way anti-injection or hung it-vulnerability warning-the black bar safety net
Originally this two-day study phpIDS, using the file: when you want to prevent the page attack, in the pages of the head of the include attack prevention file, just like General anti-injected into the file. We can use three cases to do that: 1, in each of the files within the references. Such a...
php vulnerability session register_globals login security-vulnerability warning-the black bar safety net
The first to see this a simple piece of code When php. ini in the configuration registerglobals = Off, Without any problems, Output yes But When php. ini in the configuration registerglobals = On time, First run output yes And refresh, the display is no Obviously this is not normal, This is a ver...
EZ-Blog 'public/view.php' SQL Injection Vulnerability
EZ-Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
Free Arcade Script 1.0 LFI Command Execution Exploit
Exploit for unknown platform in category web applications ==================================================== Free Arcade Script 1.0 LFI Command Execution Exploit ==================================================== !/usr/bin/perl...
Free Arcade Script 1.0 - Local File Inclusion Command Execution
Free Arcade Script 1.0 - Local File Inclusion Command Execution !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...
suPHP 0.7 - 'suPHP_ConfigPath' / 'Safe_Mode()' Restriction Bypass
source: https://www.securityfocus.com/bid/33073/info suPHP is prone to a 'safemode' restriction-bypass vulnerability. Successful exploits may allow attackers to bypass arbitrary PHP configuration options, including the 'safemode' setting. This vulnerability would be an issue in shared-hosting...
attachmax-sqlrfidisclose.txt
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability...
phpMyAdmin 'server_databases.php'远程命令执行漏洞
BUGTRAQ ID: 31188 CNCAN ID：CNCAN-2008091608 phpMyAdmin是一款基于WEB的管理MySQL的应用程序。 phpMyAdmin 'serverdatabases.php'不正确处理用户提交的输入，登录phpMyAdmin的攻击者可以利用漏洞以应用程序权限执行任意代码。 如果PHP配置允许类似exec的命令，利用serverdatabases.php脚本可使登录phpMyAdmin的用户执行任意SHELL代码。 phpMyAdmin phpMyAdmin 2.11.9 phpMyAdmin phpMyAdmin 2.11.8 phpMyAdm...
phpmyadmin -- Code execution vulnerability
A phpMyAdmin security announcement: The serverdatabases.php script was vulnerable to an attack coming from a user who is already logged-on to phpMyAdmin, where he can execute shell code if the PHP configuration permits commands like exec...
PHP 5.2.5 - Multiple functions 'safe_mode_exec_dir' / 'open_basedir' Restriction Bypass Vulnerabilities
source: https://www.securityfocus.com/bid/31064/info PHP is prone to 'safemodeexecdir' and 'openbasedir' restriction-bypass vulnerabilities. Successful exploits could allow an attacker to execute arbitrary code. These vulnerabilities would be an issue in shared-hosting configurations where multip...