186 matches found
suPHP <= 0.7 'suPHP_ConfigPath' Safe Mode Restriction-Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33073/info suPHP is prone to a 'safemode' restriction-bypass vulnerability. Successful exploits may allow attackers to bypass arbitrary PHP configuration options, including the 'safemode' setting. This vulnerability would...
CuteNews <= 1.4.0 (shell inject) Remote Command Execution Exploit
No description provided by source. ?php cutenxpl.php CuteNews 1.4.0possibly prior versions remote code execution by rgod site: http://rgod.altervista.org usage: launch form Apache, fill in requested fields, then go! make these changes in php.ini if you have troubles with this script:...
Moodle <= 1.6dev SQL Injection / Command Execution Exploit
No description provided by source. ?php moodle16devxpl.php 4.19 10/11/2005 Moodle = 1.6dev get record SQL injection / / remote commands execution by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! make these changes in php.ini if you have troubl...
Zend Platform 2.2.1 PHP.INI File Modification Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22802/info The Zend Platform is prone to an issue that may let local attackers modify the PHP configuration file 'php.ini'. This issue occurs because the application is installed with an 'inimodifier' program that may be...
Uzbey: Information Disclosure (phpinfo())
URL :- https://staging.uzbey.com/phpinfo.php Description :- phpinfo is a debug functionality that prints out detailed information on both the system and the PHP configuration. An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version. •Details of the PHP...
Mandriva Linux Security Advisory : webmin (MDVSA-2014:062)
Multiple vulnerabilities was discovered and corrected in webmin : Multiple XSS, CSRF, and arbitrary code execution vulnerabilities that impact Webmin versions prior to 1.620 CVE-2012-2981, CVE-2012-2982, CVE-2012-2983, CVE-2012-4893, SA51201. The 1.680 version fixed security issues that could be...
MGASA-2014-0132 Updated webmin package fixes security vulnerabilities
Webmin has been updated to version 1.680, which fixes some security issues in the PHP Configuration and Webalizer modules, as well as several other bugs...
Updated webmin package fixes security vulnerabilities
Webmin has been updated to version 1.680, which fixes some security issues in the PHP Configuration and Webalizer modules, as well as several other bugs...
CVE-2014-2047
Session fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session parameters through a GET request, allows remote attackers to hijack web sessions via unspecified vectors...
Kimai v0.9.2 'db_restore.php' SQL Injection Vulnerability
Exploit for php platform in category remote exploits require 'msf/core' class Metasploit3 "Kimai v0.9.2 'dbrestore.php' SQL Injection", 'Description' = %q This module exploits a SQL injection vulnerability in Kimai version 0.9.2.x. The 'dbrestore.php' file allows unauthenticated users to execute...
phpinfo
This plugin searches for the PHP Info file in all the directories and subdirectories that are sent as input and if it finds it will try to determine the version of the PHP. The PHP Info file holds information about the PHP and the system version, environment, modules, extensions, compilation...
WordPress Counter Per Day 3.2.3 Path Disclosure
Exploit Title: WordPress Counter per Day plugin PATH DISCLOSURE once the previous request is performed, admin is unable to save notes anymore, nor view the previously saved ones. --------------------- HTTP request: 2 -- GET /wp-content/plugins/count-per-day/notes.php --------------------- HTTP...
Scientific Linux Security Update : php on SL6.x i386/x86_64 (20120627)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the PHP XSL extension did not restrict the file writing capability of libxslt. A remote attacker could use this flaw to create or overwrite an arbitrary file that is writable by the user...
FreeBSD : phpMyAdmin -- Path disclosure due to missing verification of file presence (a81161d2-790f-11e1-ac16-e0cb4e266481)
The phpMyAdmin development team reports : The showconfigerrors.php scripts did not validate the presence of the configuration file, so an error message shows the full path of this file, leading to possible further attacks. For the error messages to be displayed, php.ini's errorreporting must be s...
Multiple vulnerabilities in webERP
Vulnerability ID: HTB23055 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinweberp.html Product: webERP Vendor: www.weberp.org http://www.weberp.org Vulnerable Version: 4.05 and probably prior Tested Version: 4.05 Vendor Notification: 26 October 2011 Vulnerability Type: XSS, S...
DEBIAN-CVE-2010-4725
Smarty before 3.0.0 RC3 does not properly handle an on value of the asptags option in the php.ini file, which has unspecified impact and remote attack vectors...
Class Gallery 1. 8. 9 vulnerability in the background to get shell-vulnerability warning-the black bar safety net
Class Gallery 1. 8. 9 is a lesson in Gallery 1. 8. 8 upgrade version Major is increased by including the Chinese and other language files, Fix some security issues, Supplement a forum post to delete the function and output of the exercises, or download the job when the interrupt problems and the...
Nakid CMS (fckeditor) Remote Arbitrary File Upload Exploit
?php / ----------------------------------------------------------------- Nakid CMS fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,...
Vulnerability in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Remote Command Execution. Component Type: TYPO3 Core Affected Versions: 4.3.0, 4.3.1 and 4.3.2 + development releases of 4.4 branch Vulnerability Types: Remote Command Execution Overall Severity: Critical Release Date: April 9, 2010 Vulnerab...
ewebeditor for php arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
This vulnerability only tested the latest version v3. 8,don't know low version of the existence of this vulnerability. PHP version of ewebeditor did not use the database to save the configuration information, all information is located in the php/config. in php, The code is as follows: ? php...