11 matches found
phpmyadmin -- Full path disclosure vulnerability in SQL parser
The phpMyAdmin development team reports: By calling a particular script that is part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. We consider this vulnerability ...
phpmyadmin -- Multiple full path disclosure vulnerabilities
The phpMyAdmin development team reports: By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. We consider these vulnerabilities to ...
PHP: be careful urldecode triggered SQL injection vulnerability-vulnerability warning-the black bar safety net
Title: PHP: a careful urldecode inducedSQL injectionvulnerability Author: Demon Links: http://demon.tw/programming/php-urldecode-sql-injection.html Ihipop school Discuz X1. 5 The Forum is black, where the noisy one afternoon. Google“Discuz! X1-1.5 notifycredit.php Blind SQL injection exploit”, yo...
PHP 5.4.3 - 'com_event_sink' Denial of Service
?php / PHP = 5.4.3 comeventsink Code Execution Proof of Concept Found by condis Website: http://cond.psychodela.pl Tested on: PHP 5.3.8 + Windows XP SP3 Professional PL PHP 5.3.10 + Windows XP SP3 Professional PL PHP 5.4.0 + Windows XP SP3 Professional PL PHP 5.4.3 + Windows XP SP3 Professional P...
phpMyAdmin -- Path disclosure due to missing verification of file presence
The phpMyAdmin development team reports: The showconfigerrors.php scripts did not validate the presence of the configuration file, so an error message shows the full path of this file, leading to possible further attacks. For the error messages to be displayed, php.ini's errorreporting must be se...
include()local file inclusion vulnerability Caprice-vulnerability warning-the black bar safety net
by Ryat http://www.wolvez.org 2008-2-22 Reference: Local file inclusion vulnerability is the PHP of the more Common Vulnerabilities, like the following code: include'inc/'.$ GET'a'.'/ global.php'; This is a typical file contains the vulnerability, but you want to include any files while the need ...
PHP security----using Register Globals-bug warning-the black bar safety net
Using Register Globals can PHP the most controversial change from PHP " 4.2.0 version of the beginning of the configuration file, registerglobals the default value from on to off. For this option the dependence is so prevalent that many people simply don't know it exists and thought PHP was so...
Somery <= 0.4.6 (skin_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================ Somery = 0.4.6 skindir Remote File Include Vulnerability ============================================================ Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote Fil...
Somery <= 0.4.6 (skin_dir) Remote File Include Vulnerability
No description provided by source. Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote File Inclusion Exploit" Vulnerable version: Somery 0.4.6 Operating System: - All OS Vendor URL: Robin de Graaf - [email protected] Somery website - http://somery.danwa.net Description: Somery, also known as...
Somery 0.4.6 - 'skin_dir' Remote File Inclusion
Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote File Inclusion Exploit" Vulnerable version: Somery 0.4.6 Operating System: - All OS Vendor URL: Robin de Graaf - [email protected] Somery website - http://somery.danwa.net Description: Somery, also known as the Somery weblogging system...
FreeBSD : phpmyadmin -- information disclosure vulnerability (a7062952-9023-11d9-a22c-0001020eed82)
A phpMyAdmin security announcement reports : By calling some scripts that are part of phpMyAdmin in an unexpected way especially scripts in the libraries subdirectory, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmi...