4723 matches found
IMG-BBS from MT312 vulnerable to cross-site scripting
Overview IMG-BBS from MT312 contains a cross-site scripting vulnerability. IMG-BBS from MT312, is a web log system that supports posting picture files via email from a mobile phone. IMG-BBS contains a cross-site scripting vulnerability. Note that versions of IMG-BBS imgbbs.lzh that contain...
PHP <= 5.2.9 Local Safemod Bypass Exploit (win32)
No description provided by source. Abysssec Inc Public Advisory Title : PHP = 5.2.9 SafeMod Bypass Vulnerability Affected Version : Tested on 5.2.8, 5.2.6 but previous versions maybe be afftect Vendor Site : www.php.net Vulnerability Discoverd by : www.abysssec.com Description : Here is another...
PHP <= 5.2.9 Local Safemod Bypass Exploit (win32)
Exploit for unknown platform in category local exploits ================================================= PHP = 5.2.9 Local Safemod Bypass Exploit win32 ================================================= Abysssec Inc Public Advisory Title : PHP = 5.2.9 SafeMod Bypass Vulnerability Affected Version...
CPCommerce 1.2.x - 'GLOBALS[prefix]' Arbitrary File Inclusion
!/usr/bin/perl cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit by staker mail: stakerathotmaildotit url: http://cpcommerce.cpradio.org it works with registerglobals=on if you wanna carry out a LFI - mq=off short explanation: cpCommerce contains one flaw that allows an attacker to...
PHP 5.3.2 - xml_utf8_decode() UTF-8 Input Validation
PHP 5.3.2 - xmlutf8decode UTF-8 Input Validation source: https://www.securityfocus.com/bid/44605/info PHP is prone to a vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow attackers to provide unexpected input and possibly bypass...
CVE-2009-1444
PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...
PHP 5.2.9 cURL - Safe_mode open_basedir Restriction Bypass
PHP 5.2.9 cURL - Safemode openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/34475/info PHP is prone to a 'safemode' and 'openbasedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access files in unauthorized locations. This vulnerability...
EUVD-2009-1270
The JSONparser function ext/json/JSONparser.c in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service segmentation fault via a malformed string to the jsondecode API function...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENTROOT parameter to 1 index.php3, 2 locate.php3, 3 searchresults.php3, 4 classifieds/index.php3, and 5 classifieds/view.php3; 6 index.php3, 7 manager.php3, 8 pass.php3, 9 remember.php3 10...
Remote file inclusion
PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery comtreeg component 1.0 for Joomla!, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfiglivesite parameter...
pluck 4.6 read arbitrary files vulnerability!- Vulnerability warning-the black bar safety net
by:xhming data/modules/albums/pagesadmin/albumsgetimage.php .................................... $image = $GET'image'; if ! ereg dividing"thumb", $image if pregmatch". /A-Za-z0-9. 0,11", $image, $matches if $image != $matches0 unset$image; die"A hacking attempt has been detected. For security...
SOL9761 - PHP vulnerability - CVE-2008-5557
A heap-based buffer overflow in PHP 4.3.0 through 5.2.6 may allow attackers to execute arbitrary code. Information about this advisory is available at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the information may be removed without o...
Remote file inclusion
PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...
CVE-2009-0754
PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.funcoverload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server...
CVE-2009-0754
PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.funcoverload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server...
EUVD-2008-6191
PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager comdadamail component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter...
CVE-2008-6138
The CVE-2008-6138 entry concerns a PHP remote file inclusion in adminhead.php of WebBiscuits Modules Controller 1.1 and earlier. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the path[docroot] parameter, enabling remote code execution. Affected s...
Remote file inclusion
PHP remote file inclusion vulnerability in plugins/rssimporterfunctions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...