PHP 5.2.9 cURL - Safe_mode open_basedir Restriction Bypass

PHP 5.2.9 cURL - Safemode openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/34475/info PHP is prone to a 'safemode' and 'openbasedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access files in unauthorized locations. This vulnerability...

EUVD-2009-1270

The JSONparser function ext/json/JSONparser.c in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service segmentation fault via a malformed string to the jsondecode API function...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENTROOT parameter to 1 index.php3, 2 locate.php3, 3 searchresults.php3, 4 classifieds/index.php3, and 5 classifieds/view.php3; 6 index.php3, 7 manager.php3, 8 pass.php3, 9 remember.php3 10...

Remote file inclusion

PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery comtreeg component 1.0 for Joomla!, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfiglivesite parameter...

pluck 4.6 read arbitrary files vulnerability!- Vulnerability warning-the black bar safety net

by:xhming data/modules/albums/pagesadmin/albumsgetimage.php .................................... $image = $GET'image'; if ! ereg dividing"thumb", $image if pregmatch". /A-Za-z0-9. 0,11", $image, $matches if $image != $matches0 unset$image; die"A hacking attempt has been detected. For security...

SOL9761 - PHP vulnerability - CVE-2008-5557

A heap-based buffer overflow in PHP 4.3.0 through 5.2.6 may allow attackers to execute arbitrary code. Information about this advisory is available at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the information may be removed without o...

Remote file inclusion

PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...

CVE-2009-0754

PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.funcoverload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server...

CVE-2009-0754

PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.funcoverload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server...

EUVD-2008-6191

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager comdadamail component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSmosConfigabsolutepath parameter...

CVE-2008-6138

The CVE-2008-6138 entry concerns a PHP remote file inclusion in adminhead.php of WebBiscuits Modules Controller 1.1 and earlier. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the path[docroot] parameter, enabling remote code execution. Affected s...

Remote file inclusion

PHP remote file inclusion vulnerability in plugins/rssimporterfunctions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

CVE-2009-0464

PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arbitrary PHP code via a URL in the INCDIR parameter...

Simple Machines Forums (BBCode) Cookie Stealing Vulnerability

Exploit for unknown platform in category web applications ============================================================= Simple Machines Forums BBCode Cookie Stealing Vulnerability ============================================================= Author: Xianur0 BBCode of the smf not filtered properly...

PHPSlash 0.8.1.1 - Remote Code Execution

PHPSlash 0.8.1.1 - Remote Code Execution !/usr/bin/php -q agent 'Mozilla Firefox' ; // Hey ya : head; // Target $url = getp 'url', true ; // Proxy options $prh = getp 'proxhost' ; $pra = getp 'proxauth' ; // Use a proxy ? if $prh // host:ip $web-proxy $prh ; // Authentication if $pra $web-proxyau...

Mandrake Security Advisory MDVSA-2009:023 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:023. OpenVAS Vulnerability Test $Id: mdksa2009023.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:023 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2008-5922

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...