13 matches found
EUVD-2005-3695
Malware in sbrugna...
CVE-2005-3698
PHP Easy Download allows remote attackers to bypass authentication via edit.php...
PHP Easy Download admin/save.php Paramater Code Injection Vulnerability
The remote web server contains a PHP script that is affected by a remote code execution issue. Description: The version of PHP Easy Download installed on the remote host fails to sanitize input to the 'moreinfo' parameter before using it in the 'save.php' script. By sending a specially-crafted...
PHP Easy Download admin/save.php Parameter Code Injection Vulnerability
The version of PHP Easy Download installed on the remote host fails to sanitize input to the SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
PHP Easy Download admin/save.php moreinfo Parameter Code Injection
The version of PHP Easy Download installed on the remote host fails to sanitize input to the 'moreinfo' parameter before using it in the 'save.php' script. By sending a specially crafted value, an attacker can store and execute code at the privilege level of the remote web server. %NASLMINLEVEL...
PHP Easy Download file_info/admin/save.php文件远程代码执行漏洞
PHP Easy Download是一款方便易用的下载脚本。 PHP Easy Download在处理用户请求时存在输入验证漏洞,远程攻击者可能利用此漏洞以Web进程权限在服务器上执行任意命令。 PHP Easy Download的fileinfo/admin/save.php脚本没有正确验证description、moreinfo、accesses、date和filename参数的输入,允许攻击者通过filename加上字符串“.0”写入Web可访问的文件,导致执行任意PHP代码。漏洞代码如下: fileinfo/admin/save.php, 14-36行: - 14:...
PHP Easy Downloader 1.5 - save.php Remote Code Execution
PHP Easy Downloader 1.5 - save.php Remote Code Execution !/usr/bin/perl +------------------------------------------------------------------------------------------- + PHP Easy Download +------------------------------------------------------------------------------------------- + Details: + PHP Ea...
PHP Easy Downloader <= 1.5 (save.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------------------------- + PHP Easy Download = 1.5 Remote Code Execution Vulnerability +-------------------------------------------------------------------------------------------...
PHP Easy Downloader <= 1.5 (save.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =================================================================== PHP Easy Downloader +------------------------------------------------------------------------------------------- + Details: + PHP Easy Download by default installation...
PHP Easy Downloader 1.5 - 'save.php' Remote Code Execution
!/usr/bin/perl +------------------------------------------------------------------------------------------- + PHP Easy Download +------------------------------------------------------------------------------------------- + Details: + PHP Easy Download by default installation doesn't prevent any o...
CVE-2005-3698
PHP Easy Download allows remote attackers to bypass authentication via edit.php...
CVE-2005-3698
PHP Easy Download allows remote attackers to bypass authentication via edit.php...
CVE-2005-3698
PHP Easy Download (CVE-2005-3698) allows remote attackers to bypass authentication via edit.php. The connected sources (NVD, Red Hat advisory, CVE List) confirm an access-control weakness at the edit.php entry point, enabling unauthorized access. No specific exploitation details, affected version...