2964 matches found
PT-2006-5350 · Bob Jewell · Bob Jewell Discloser
Name of the Vulnerable Software and Affected Versions: Bob Jewell Discloser version 0.0.4 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the type parameter in the plugins/plugins.php file. However, there is a dispute about whether an attacker can control...
CVE-2006-3608
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file...
CVE-2006-3532: Undefined Security Weakness
PHP file inclusion vulnerability in includes/editnew.php in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Pathsextensionspath parameter...
News52.txt
!/usr/bin/perl VulnScr: News version 5.2 and prior E-mail: [email protected] Web: www.vincent-leclercq.com Date: Thu June 29 12:01 2006 Credits: DarkFig [email protected] Vuln: XSS, Full Path Disclosure, SQL Injection Advisorie: http://www.acid-root.new.fr/advisories/news52.txt frenc...
CVE-2006-3314
PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to execute arbitrary PHP code via a URL in the pageid parameter...
PT-2006-4105 · Rig · Ralf Image Gallery
Name of the Vulnerable Software and Affected Versions: Ralf Image Gallery RIG versions 0.7.4 through 0.9 Description: The issue allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks when register globals is enabled. This can be achieved via URLs or ".."...
CVE-2006-3136
Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote attackers to execute arbitrary PHP code via a URL the DIRLIBS parameter in 1 path/action.php, and to files in path/nucleus including 2 media.php, 3 /xmlrpc/server.php, and 4 /xmlrpc/apimetaweblog.inc.php. NOTE: this i...
CVE-2006-2828
Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbbrootpath parameter to the admin scripts 1 index.php, 2 adminugauth.php, 3 adminboard.php, 4 admindisallow.php, 5 adminforumauth.php, 6 admingroups.php, 7...
CVE-2006-2828
CVE-2006-2828 is a vulnerability in PHP-Nuke where a global variable overwrite allows remote PHP file inclusion by a modified phpbb_root_path parameter to multiple admin scripts (index.php, admin_ug_auth.php, admin_board.php, admin_disallow.php, admin_forumauth.php, admin_groups.php, admin_ranks....
CVE-2006-2828: Undefined Security Weakness
Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbbrootpath parameter to the admin scripts 1 index.php, 2 adminugauth.php, 3 adminboard.php, 4 admindisallow.php, 5 adminforumauth.php, 6 admingroups.php, 7...
DeluxeBB <= 1.06 (Attachment mod_mime) Remote Exploit
Exploit for unknown platform in category web applications ===================================================== DeluxeBB = 1.06 Attachment modmime Remote Exploit ===================================================== !/usr/bin/php -q -d shortopentag=on ? echo "DeluxeBB = v1.06 attachment modmime...
CVE-2006-2281
X-Scripts X-Poll xpoll 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to upload a PHP file, then access it...
CVE-2006-2158
Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when registerglobals is enabled, allows remote attackers to modify arbitrary program variables via parameters, which are evaluated as PHP variable variables, as demonstrated by performing PHP remo...
Serendipity Blog vuln
I found this while auditing serendipty blog. You need a blog account which isnt that big of deal just google all the sites that give out free blogs for this to work. After you get hte blog account you go into your admin panel where there will be config options. The mysql details are editable from...
vBulletin ImpEx 1.74 - Remote Command Execution
vBulletin ImpEx 1.74 - Remote Command Execution " ."turl:" ."hurl:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $turl.$hurl, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file...
Limbo CMS Multiple Vulnerabilities
The remote version of Limbo CMS is vulnerable to several flaws. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2006-1363
The CVE-2006-1363 issue affects Free Web Publishing System (FreeWPS) 2.11 (Justin White/YTZ). A remote attacker can upload a PHP file to the /upload directory via the dirPath parameter and then access that file to execute arbitrary PHP code, enabling remote code execution. Impact is partial confi...
CVE-2006-1363: Undefined Security Weakness
images.php in Justin White aka YTZ Free Web Publishing System FreeWPS 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file...
Directory traversal
Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files via ".." dot dot sequences in the stepOrder parameter to 1 upgrade/index.php or 2 install/index.php...
FCKEditor 2.0 <= 2.2 (connector.php) Remote Shell Upload Exploit
No description provided by source. ?php ---fckeditor22xpl.php 15.38 04/12/2005 FCKEditor 2.0 = 2.2 shell upload coded by rgod site: http://retrogod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Security against defeat implies defensive tactics; ability to...