WSCreator 1.1 Blind SQL Injection

WSCreator 1.1 Blind SQL Injection Name WSCreator Vendor http://www.wscreator.com Versions Affected 1.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-15 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III...

To bypass the'Access Denied'-a vulnerability warning-the black bar safety net

jackal registerglobals = On ? php $sqlcontent = "? PHP exit’Access Denied’; ?& gt;".$ p."\ n"; fileputcontents$logfile, $sqlcontent; ?& gt;exp-demo. php? logfile=php://filter/write=convert. base64-decode/resource=abc. php&p=aPD9waHAgcGhwaW5mbygpOy8vPz4= http://marc.info/?l=full-disclosure& ... 7...

CVE-2009-4319

CVE-2009-4319 describes a PHP remote file inclusion in eoCMS (version 0.9.03 and earlier) via js/bbcodepress/bbcode-form.php. The flaw occurs when register_globals is enabled and allows an attacker to execute arbitrary PHP code by supplying a URL in the BBCODE_path parameter. The available source...

CMS <= 1.0 Remote Code Execution in Nuggetz

Exploit for unknown platform in category web applications =========================================== CMS This file is used to save any changes done in nugget. The parameter 'nugget' is used to call the file for ex. support.nugget, which is at /webdir/data/. The changed values are written back to...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/classes/pctemplate.php in PointComma 3.8b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pcConfigsmartyPath parameter...

PHP 'ini_restore()' Memory Information Disclosure Vulnerability

No description provided by source. Credit/Author: Maksymilian Arciemowicz from SecurityReason Vulnerable: PHP PHP 5.3 PHP PHP 5.2.10 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64...

PHP 5.3.1 version before the denial of service attack vulnerability(with test code)-vulnerability warning-the black bar safety net

Code: PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan said Calin [email protected] import httplib, urllib, sys, string, threading from string import replace from urlparse import urlparse def usage: print"" print "PHP MultiPart Form-Data Denial of Service proof of...

PHP 5.2.11, 5.3.0 Restriction Bypass Vulnerability

PHP is prone to an SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100352...

CVE-2009-3546

The gdGetColors function in gdgd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different...

Remote file inclusion

PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the AURORAMODULESFOLDER parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

dedecms injection vulnerability affecting version 5. 3 – 5.5 Posted in php-vulnerability warning-the black bar safety net

Excerpt from: hacking notes dedecms5. 3 and 5. The 5-Series version, there is a major injection vulnerability, Please note the following offensive, only for research. Exploit this vulnerability to illegal activities, at your peril. Suppose domain name is: www. abc. com the attack steps are as...

Remote file inclusion

PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the filesave parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in searchwA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the LIBPATH parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Papoo CMS 3.7.3 Authenticated Arbitrary Code Execution Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Papoo CMS 3.7.3 Authenticated Arbitrary Code Execution Vulnerability ==================================================================== Advisory: Papoo CMS: Authenticat...

Remote file inclusion

PHP remote file inclusion vulnerability in toolbarext.php in the VehicleManager comvehiclemanager component 1.0 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2009-2378

PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASEDIRjaxformmailer parameter...

CVE-2009-2218

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to 1 ihead.php, 2 inav.php, 3 usernew2.php, or 4 house/myrents.php; or 5 allbooks.php, 6 home.php,...

CVE-2009-1946

CVE-2009-1946 is a PHP remote file inclusion vulnerability affecting AdaptBB 1.0. When register_globals is enabled, an attacker can craft a URL in the forumspath parameter of latestposts.php to cause arbitrary PHP code execution on the server. The vulnerability is documented in multiple sources (...