phpinfo

This plugin searches for the PHP Info file in all the directories and subdirectories that are sent as input and if it finds it will try to determine the version of the PHP. The PHP Info file holds information about the PHP and the system version, environment, modules, extensions, compilation...

WordPress Counter Per Day 3.2.3 Path Disclosure

Exploit Title: WordPress Counter per Day plugin PATH DISCLOSURE once the previous request is performed, admin is unable to save notes anymore, nor view the previously saved ones. --------------------- HTTP request: 2 -- GET /wp-content/plugins/count-per-day/notes.php --------------------- HTTP...

Scientific Linux Security Update : php on SL6.x i386/x86_64 (20120627)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the PHP XSL extension did not restrict the file writing capability of libxslt. A remote attacker could use this flaw to create or overwrite an arbitrary file that is writable by the user...

FreeBSD : phpMyAdmin -- Path disclosure due to missing verification of file presence (a81161d2-790f-11e1-ac16-e0cb4e266481)

The phpMyAdmin development team reports : The showconfigerrors.php scripts did not validate the presence of the configuration file, so an error message shows the full path of this file, leading to possible further attacks. For the error messages to be displayed, php.ini's errorreporting must be s...

Multiple vulnerabilities in webERP

Vulnerability ID: HTB23055 Reference: https://www.htbridge.ch/advisory/multiplevulnerabilitiesinweberp.html Product: webERP Vendor: www.weberp.org http://www.weberp.org Vulnerable Version: 4.05 and probably prior Tested Version: 4.05 Vendor Notification: 26 October 2011 Vulnerability Type: XSS, S...

DEBIAN-CVE-2010-4725

Smarty before 3.0.0 RC3 does not properly handle an on value of the asptags option in the php.ini file, which has unspecified impact and remote attack vectors...

Class Gallery 1. 8. 9 vulnerability in the background to get shell-vulnerability warning-the black bar safety net

Class Gallery 1. 8. 9 is a lesson in Gallery 1. 8. 8 upgrade version Major is increased by including the Chinese and other language files, Fix some security issues, Supplement a forum post to delete the function and output of the exercises, or download the job when the interrupt problems and the...

Nakid CMS (fckeditor) Remote Arbitrary File Upload Exploit

?php / ----------------------------------------------------------------- Nakid CMS fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,...

Vulnerability in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Remote Command Execution. Component Type: TYPO3 Core Affected Versions: 4.3.0, 4.3.1 and 4.3.2 + development releases of 4.4 branch Vulnerability Types: Remote Command Execution Overall Severity: Critical Release Date: April 9, 2010 Vulnerab...

ewebeditor for php arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

This vulnerability only tested the latest version v3. 8,don't know low version of the existence of this vulnerability. PHP version of ewebeditor did not use the database to save the configuration information, all information is located in the php/config. in php, The code is as follows: ? php...

PHP Remote File Inclusion

Added: 01/28/2010 Background PHP scripts support the include and require statements, which cause an outside script to be run within the calling script. The included script can be a local file or, in some configurations, the URL of a remote file. Problem The PHP script is vulnerable to a remote fi...

Citrix XenCenterWeb (XSS/SQL/RCE) Multiple Remote Vulnerabilities

No description provided by source. Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero...

citrix xencenterweb - Cross-Site Scripting / SQL Injection / Remote Code Execution

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

Citrix XenCenterWeb (XSS/SQL/RCE) Multiple Remote Vulnerabilities

Exploit for windows platform in category remote exploits ================================================================= Citrix XenCenterWeb XSS/SQL/RCE Multiple Remote Vulnerabilities ================================================================= Secure Network - Security Research Advisory...

Citrix XenCenterWeb Multiple Vulnerabilities

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

Citrix XenCenterWeb XSS / XSRF / SQL Injection

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

Leap CMS Multiple remote vulnerabilities

The remote Leap CMS is affected to multiple remote vulnerabilities. Leap is a single file, template independent, PHP and MySQL Content Management System. OpenVAS Vulnerability Test $Id: remote-LeapCMSmulti.nasl 6520 2017-07-04 14:28:49Z cfischer $ Description: This script multiple remote...

Flatnux 2009-03-27 (Upload/ID) Multiple Remote Vulnerabilities

No description provided by source. Author: girex Homepage: girex.altervista.org Date: 17/04/2009 CMS: flatnux-2009-03-27 site: flatnux.altervista.org Bugs: Multiple remote vulnerabilities Flatnux suffers of multiple local file inclusions: output of my scanner Line: 10 File:...

Flatnux 2009-03-27 - Arbitrary File Upload Information Disclosure

Flatnux 2009-03-27 - Arbitrary File Upload Information Disclosure Author: girex Homepage: girex.altervista.org Date: 17/04/2009 CMS: flatnux-2009-03-27 site: flatnux.altervista.org Bugs: Multiple remote vulnerabilities Flatnux suffers of multiple local file inclusions: output of my scanner Line: ...

Flatnux 2009-03-27 - Arbitrary File Upload / Information Disclosure

Author: girex Homepage: girex.altervista.org Date: 17/04/2009 CMS: flatnux-2009-03-27 site: flatnux.altervista.org Bugs: Multiple remote vulnerabilities Flatnux suffers of multiple local file inclusions: output of my scanner Line: 10 File: D:/xampp/htdocs/flat/flatnux/sections/00News/admin.php...