143 matches found
CVE-2006-6878
admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights7 parameter to 1 during a login action...
CVE-2006-6880
Multiple SQL injection vulnerabilities in code/guestadd.php in PHP-Update 2.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 newmessage, 2 newname, 3 newwebsite, or 4 newemail parameter...
CVE-2006-6879
Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated users to upload arbitrary PHP scripts to the gfx/ and files/ directories via the userfile parameter...
PHP-Update <= 2.7 Multiple Remote Vulnerabilities Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- PHP-Update = 2.7 strreplace sql injection / privilege escalation / / cmd exec ii by rgod dork: "Powered by PHP-Update" -site:www.php-update.co.uk -ihackstuff -exploit mail:...
PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author = "undefined1"; my $date =...
PHP-Update 2.7 - Multiple Vulnerabilities
PHP-Update 2.7 - Multiple Vulnerabilities = 4.1 allowing subs / if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlend...
PHP-Update <= 2.7 Multiple Remote Vulnerabilities Exploit
Exploit for unknown platform in category web applications ========================================================= PHP-Update = 4.1 allowing subs / if $argc3 printr' --------------------------------------------------------------------------- Usage: php '.$argv0.' host path cmd OPTIONS host: targ...
PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =================================================================== PHP-Update = 2.7 admin/uploads.php Remote Code Execution Exploit =================================================================== !/usr/bin/perl rgod u fucking little...
PHP-Update 2.7 - adminuploads.php Remote Code Execution
PHP-Update 2.7 - adminuploads.php Remote Code Execution !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author =...
PHP-Update 2.7 - '/admin/uploads.php' Remote Code Execution
!/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author = "undefined1"; my $date = "2006-10-21"; my $settings = "none...
PHP-Update 2.7 - Multiple Vulnerabilities
= 4.1 allowing subs / if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" "...
CVE-2006-6661
Variable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code via multiple vectors that use the extract function, as demonstrated by the 1 f, 2 newmessage, 3 newusername, 4 adminuser, and ...
CVE-2006-6661
This CVE affects PHP-Update (blog.php)
PHP-Update blog.php Variable Overwriting Arbitrary Code Execution
The remote host is running PHP-Update, a content management system written in PHP. The version of PHP-Update installed on the remote host fails to sanitize user-supplied arguments to the 'blog.php' script before importing them into the global symbol table. By leveraging this flaw, an...
CVE-2006-6661: Undefined Security Weakness
Variable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code via multiple vectors that use the extract function, as demonstrated by the 1 f, 2 newmessage, 3 newusername, 4 adminuser, and ...
PHP-Update 2.7 - extract() Authentication Bypass Shell Injection
PHP-Update 2.7 - extract Authentication Bypass Shell Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont+...
PHP-Update <= 2.7 extract() Auth Bypass / Shell Inject Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- PHPUpdate = 2.7 extract auth bypass / shell inject by rgod dork: "Powered by PHP-Update" -site:www.php-update.co.uk mail: retrog at alice dot it site:...
PHP-Update <= 2.7 extract() Auth Bypass / Shell Inject Exploit
Exploit for unknown platform in category web applications ============================================================== PHP-Update 126 $result.=" ."; else $result...
PHP-Update 2.7 - 'extract()' Authentication Bypass / Shell Injection
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; re...
Important: Red Hat Security Advisory: php security update for Stronghold
Updated PHP packages that fix multiple security issues are now available for Stronghold 4.0 for Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...