4737 matches found
PHP 5.3.1 version before the denial of service attack vulnerability(with test code)-vulnerability warning-the black bar safety net
Code: PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan said Calin [email protected] import httplib, urllib, sys, string, threading from string import replace from urlparse import urlparse def usage: print"" print "PHP MultiPart Form-Data Denial of Service proof of...
PHP 5.2.11, 5.3.0 Restriction Bypass Vulnerability
PHP is prone to an SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100352...
CVE-2009-3546
The gdGetColors function in gdgd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted GD file, a different...
Remote file inclusion
PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the AURORAMODULESFOLDER parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...
dedecms injection vulnerability affecting version 5. 3 – 5.5 Posted in php-vulnerability warning-the black bar safety net
Excerpt from: hacking notes dedecms5. 3 and 5. The 5-Series version, there is a major injection vulnerability, Please note the following offensive, only for research. Exploit this vulnerability to illegal activities, at your peril. Suppose domain name is: www. abc. com the attack steps are as...
Remote file inclusion
PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the filesave parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in searchwA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the LIBPATH parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
Papoo CMS 3.7.3 Authenticated Arbitrary Code Execution Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Papoo CMS 3.7.3 Authenticated Arbitrary Code Execution Vulnerability ==================================================================== Advisory: Papoo CMS: Authenticat...
Remote file inclusion
PHP remote file inclusion vulnerability in toolbarext.php in the VehicleManager comvehiclemanager component 1.0 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2009-2378
PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASEDIRjaxformmailer parameter...
CVE-2009-2218
Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to 1 ihead.php, 2 inav.php, 3 usernew2.php, or 4 house/myrents.php; or 5 allbooks.php, 6 home.php,...
CVE-2009-1946
CVE-2009-1946 is a PHP remote file inclusion vulnerability affecting AdaptBB 1.0. When register_globals is enabled, an attacker can craft a URL in the forumspath parameter of latestposts.php to cause arbitrary PHP code execution on the server. The vulnerability is documented in multiple sources (...
IMG-BBS from MT312 vulnerable to cross-site scripting
Overview IMG-BBS from MT312 contains a cross-site scripting vulnerability. IMG-BBS from MT312, is a web log system that supports posting picture files via email from a mobile phone. IMG-BBS contains a cross-site scripting vulnerability. Note that versions of IMG-BBS imgbbs.lzh that contain...
PHP <= 5.2.9 Local Safemod Bypass Exploit (win32)
No description provided by source. Abysssec Inc Public Advisory Title : PHP = 5.2.9 SafeMod Bypass Vulnerability Affected Version : Tested on 5.2.8, 5.2.6 but previous versions maybe be afftect Vendor Site : www.php.net Vulnerability Discoverd by : www.abysssec.com Description : Here is another...
PHP <= 5.2.9 Local Safemod Bypass Exploit (win32)
Exploit for unknown platform in category local exploits ================================================= PHP = 5.2.9 Local Safemod Bypass Exploit win32 ================================================= Abysssec Inc Public Advisory Title : PHP = 5.2.9 SafeMod Bypass Vulnerability Affected Version...
CPCommerce 1.2.x - 'GLOBALS[prefix]' Arbitrary File Inclusion
!/usr/bin/perl cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit by staker mail: stakerathotmaildotit url: http://cpcommerce.cpradio.org it works with registerglobals=on if you wanna carry out a LFI - mq=off short explanation: cpCommerce contains one flaw that allows an attacker to...
PHP 5.3.2 - xml_utf8_decode() UTF-8 Input Validation
PHP 5.3.2 - xmlutf8decode UTF-8 Input Validation source: https://www.securityfocus.com/bid/44605/info PHP is prone to a vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow attackers to provide unexpected input and possibly bypass...
