seagull-upload.txt

?php / ------------------------------------------------------------------------ Seagull PHP Framework = 0.6.4 fckeditor Arbitrary File Upload Exploit ------------------------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

Seagull PHP Framework 0.6.4 - FCKeditor Arbitrary File Upload

Seagull PHP Framework 0.6.4 - FCKeditor Arbitrary File Upload ?php / ------------------------------------------------------------------------ Seagull PHP Framework = 0.6.4 fckeditor Arbitrary File Upload Exploit ------------------------------------------------------------------------ author...:...

Seagull PHP Framework <= 0.6.4 (fckeditor) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ======================================================================== Seagull PHP Framework = 0.6.4 fckeditor Arbitrary File Upload Exploit ======================================================================== ?php /...

Seagull PHP Framework optimizer.php文件信息泄露漏洞

BUGTRAQ ID: 27437 Seagull是一个PHP编译框架。 Seagull在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞获取文件信息。 Seagull PHP Framework的www/optimizer.php文件中没有正确地验证对files参数的输入： optimizer.php，61行： // get files and it's mod time if !empty$GET'files' $filesString = $GET'files'; $aFiles = explode',', $GET'files'; foreach $aFiles as...

Seagull PHP Framework &lt;= 0.6.3 Remote File Disclosure Vulnerability

No description provided by source. fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | ||...

CodeIgniter 1.5.3 vulnerabilities

CodeIgniter is a powerful PHP framework with a very small footprint, built for PHP coders who need a simple and elegant toolkit to create full-featured web applications. http://www.codeigniter.com 1. sanitizeglobals global variables unsetting By setting e.g. "SERVER=anonymous" cookie in the...

Remote file inclusion

PHP remote file inclusion vulnerability in fw/class.QuickConfigBrowser.php in Cadre PHP Framework 20020724 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigframeworkpath parameter...

CVE-2007-0677

PHP remote file inclusion vulnerability in fw/class.QuickConfigBrowser.php in Cadre PHP Framework 20020724 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigframeworkpath parameter...

CVE-2007-0677

PHP remote file inclusion vulnerability in fw/class.QuickConfigBrowser.php in Cadre PHP Framework 20020724 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigframeworkpath parameter...

CVE-2007-0677

CVE-2007-0677 affects the Cadre PHP Framework (version cited as 20020724) with a vulnerability in fw/class.Quick_Config_Browser.php. The issue is a PHP remote file inclusion via a URL supplied in the GLOBALS[config][framework_path] parameter, allowing an attacker to execute arbitrary PHP code rem...

Cadre PHP Framework Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================== Cadre PHP Framework Remote File Include Vulnerability ===================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / /...

Cadre PHP Framework - Remote File Inclusion

Cadre PHP Framework - Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV63$2007 ------------------------------------------------------------------------------------ ECHOADV63$2007 Cadre remote file inclusion...

PHP Generic library Framework - INCLUDE_PATH Remote File Inclusion

PHP Generic library Framework - INCLUDEPATH Remote File Inclusion ----------------------------------------------- PhP Generic library & framework includepath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz...

AngelineCMS Multiple Vulnerabilities

Summary: --------------------------------------------------- AngelineCMS API C 2003-2004 AngelineCMS developers [email protected] AngelineCMS API is a PHP framework which was developed for rapid development of AngelineCMS content management system. AngelineCMS API is OPEN SOURCE software...

Path disclosure and file retrieving in AtomicBoard-0.6.2

Vendors has been contacted. Main WEB: http://cal007300.student.utwente.nl/atomicboard/ DESCRIPTION: ========================================================================= What is AtomicBoard? "An object oriented framework for building forums/weblogs" AtomicBoard is an Open Source web applicati...