EUVD-2008-4339

Malware in sbrugna...

Command Execution Vulnerability in PHP Version of Rookie Enterprise Website System

Rookie enterprise website system PHP version is a PHP enterprise website system. Rookie Enterprise Website System PHP Edition has a command execution vulnerability that can be exploited by attackers to gain control of the server...

Z-Blog php Edition front regular SQL blind injection vulnerability-vulnerability warning-the black bar safety net

Brief description: The second...also a bit puzzled want to ask your developer Detailed description: The problem /zbsystem/function/csystemcommon.php function GetVars$name,$type='REQUEST' if $type=='ENV' $array=&$ENV; if $type=='GET' $array=&$GET; if $type=='POST' $array=&$POST; if $type=='COOKIE'...

CVE-2008-4358

Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name...

CVE-2008-4358

Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name...

CVE-2008-4358: Improper Input Validation

Unspecified vulnerability in class/theme.class.php in SPAW Editor PHP Edition before 2.0.8.1 has unknown impact and attack vectors, probably related to directory traversal sequences in the theme name...

phpwind management permission to disclose the exploit program PHP Edition-vulnerability warning-the black bar safety net

Ghost boy: yesterday made phpwind management authority disclosure vulnerability+exploit program, use the program is written in python, many of my friends say not available, see today yuehei school left a message saying he rewritten into PHP. Author: yuehei Source: yuehei between two points Always...

SPAW Editor PHP Edition

Remote IInclude File : SPAW Editor PHP Edition upgrade version 1.2.3 to 1.2.4 Discovered By : Hasadya Raed Contact Me : RaeDatBsdMaildotCom Download Script: http://heanet.dl.sourceforge.net/sourceforge/spaw/spaw-php-123-to-124.zip B.File :imglibrary.php : include $spawroot.'class/util.class.php';...

CVE-2006-5291

PHP remote file inclusion vulnerability in admin/includes/spaw/spawcontrol.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PH...

CVE-2006-4656: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/editeur/spawcontrol.class.php in Web Provence SLSite 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW...

CVE-2006-2519: Undefined Security Weakness

Directory traversal vulnerability in include/incext/spaw/spawcontrol.class.php in phpwcms 1.2.5-DEV allows remote attackers to include arbitrary local files via .. dot dot sequences in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in SPAW Editor PHP Edition...