186 matches found
Aardvark Topsites <= 4.2.2 Remote File Inclusion Vulnerability
The remote system contains a PHP application that is prone to remote file inclusions attacks. Description : Aardvark Topsites PHP is installed on the remote host. It is an open source Toplist management system written in PHP. The application does not sanitize user-supplied input to the...
CVE-2008-3654
Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path and PHP configuration" via unknown vectors...
Design/Logic Flaw
Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path and PHP configuration" via unknown vectors...
CVE-2008-3654
Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path and PHP configuration" via unknown vectors...
CVE-2008-3654
Unspecified vulnerability in TikiWiki CMS/Groupware before 2.0 allows attackers to obtain "path and PHP configuration" via unknown vectors...
verycms2. 0 elevation of privilege vulnerability-vulnerability warning-the black bar safety net
code: passportclient.php function Loginipwrite$winduid global $db,$timestamp,$onlineip; $logininfo="$onlineip|$timestamp|6"; $db-update "UPDATE pwuser SET lastvisit=thisvisit,thisvisit="$timestamp",onlineip="$logininfo" WHERE uid="$winduid""; Look at the$onlineip how to Global.php...
taskfreak-sql.txt
| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. TaskFreak! SQL Injection Product: TaskFreak!/Discovered in ==0.6.1 Vuln: Remote SQL Injection Description: The request is not sanitized...
TaskFreak! 0.6.1 - SQL Injection
TaskFreak! 0.6.1 - SQL Injection | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. TaskFreak! SQL Injection Product: TaskFreak!/Discovered in ==0.6.1 Vuln: Remote SQL Injection...
TaskFreak! 0.6.1 - SQL Injection
| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. TaskFreak! SQL Injection Product: TaskFreak!/Discovered in ==0.6.1 Vuln: Remote SQL Injection Description:...
Original Photo Gallery Remote Command Execution
Original Photo Gallery Remote Command Execution Name Original Photo Gallery Remote Command Execution Systems Affected Original 0.11.2 version and below Severity High Vendor http://jimmac.musichall.cz/original.php Advisory http://www.ush.it/team/ascii/hack-original/advisoryupdated.txt...
FreeBSD : flyspray -- authentication bypass (209f0d75-4b5c-11dc-a6cd-000fb5066b20)
The Flyspray Project reports : Flyspray authentication system can be bypassed by sending a carefully crafted post request. To be vulnerable, PHP configuration directive outputbuffering has to be disabled or set to a low value. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
flyspray -- authentication bypass
The Flyspray Project reports: Flyspray authentication system can be bypassed by sending a carefully crafted post request. To be vulnerable, PHP configuration directive outputbuffering has to be disabled or set to a low value...
Zend Platform 2.2.1 - PHP.INI File Modification
Zend Platform 2.2.1 - PHP.INI File Modification source: https://www.securityfocus.com/bid/22802/info The Zend Platform is prone to an issue that may let local attackers modify the PHP configuration file 'php.ini'. This issue occurs because the application is installed with an 'inimodifier' progra...
QuickCart 2.0 (categories.php) Local File Inclusion Exploit
Exploit for unknown platform in category web applications =========================================================== QuickCart 2.0 categories.php Local File Inclusion Exploit =========================================================== r0ut3r Presents... Another r0ut3r discovery! QuickCart 2.0...
Punbb <= 1.2.13 Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -= PunBB = 1.2.13 Multiple Vulnerabilities =- Written on : 2006/10/10 Released on : 2006/10/29 Author : Nms nms at wargan dot org Affected application : PunBB = 1.2.13 Type of vulnerability : SQL Injection and Local File Inclusion Required PHP...
PunBB-1.2.13.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -= PunBB Affected application : PunBB = 1.2.13 Type of vulnerability : SQL Injection and Local File Inclusion Required PHP Configuration : Registerglobals enabled, PHP = 4.4.2 or PHP = 5.1.3 for the SQL Injection, none for the Local File Inclusion...
PHP Ini_Restore() Safe_Mode及Open_Basedir限制绕过漏洞
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP在处理配置选项时存在漏洞，远程攻击者可能利用此漏洞绕过安全限制。 如果将PHP用作Apache模块的话，就可以使用Apache配置文件（如httpd.conf）中的指令更改配置设置。例如，httpd.conf中的openbasedir： - --- Directory /usr/home/frajer/publichtml/ Options FollowSymLinks MultiViews Indexes AllowOverride None phpadminflag safemode 1...
BASE base_qry_common.php file include
Added: 06/23/2006 CVE: CVE-2006-2685 BID: 18298 OSVDB: 25770 Background Snort is an open-source intrusion detection system. The Basic Analysis and Security Engine BASE is a web interface for analyzing Snort results. Problem If the registerglobals PHP option is enabled, the baseqrycommon.php scrip...
CuteNews <= 1.4.1 (categories.mdu) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl cijfer-cnxpl - CuteNews =1.4.1 Remote Command Execution Copyright c 2005 cijfer [email protected] All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-cnxpl.pl -h www.xxxx.org -d /news [email protected] /$ id;uname -a uid=48apache...
[SA17865] VisNetic Mail Server Multiple Webmail Vulnerabilities
TITLE: VisNetic Mail Server Multiple Webmail Vulnerabilities SECUNIA ADVISORY ID: SA17865 VERIFY ADVISORY: http://secunia.com/advisories/17865/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: VisNetic Mail Server 8.x...