980 matches found
IceWarp Merak WebMail Server < 9.4.2 Multiple Vulnerabilities
The remote host is running IceWarp WebMail Server - a webmail server for Windows and Linux. According to its banner, the version of IceWarp installed on the remote host is earlier than 9.4.2. Such versions may reportedly be affected by multiple vulnerabilities : - A SQL injection vulnerability...
TxtBlog 1.0 Alpha Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = TxtBlog v 1.0 Alpha Downl =...
Authentication flaw
aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflogautha cookie to "A" or "O" in 1 editdelete.php, 2 editcat.php, 3 editlock.php, and 4 editform.php...
CVE-2008-4769
Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...
CVE-2008-4769
Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...
CVE-2008-4769
Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...
EUVD-2008-4749
Directory traversal vulnerability in the getcategorytemplate function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php. NOTE: some of these details are obtained from thi...
FOSS Gallery Public Version <= 1.0 / Arbitrary file upload Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= FOSS Gallery Public Version = 1.0 / Arbitrary file upload Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: FOSS Gallery Public Version Version: = 1.0 File affected:...
Kwalbum <= 2.0.2 Arbitary File Upload Vulnerability
Exploit for unknown platform in category web applications =================================================== Kwalbum = 2.0.2 Arbitary File Upload Vulnerability =================================================== ========================================================== Kwalbum = 2.0.2 Arbitrary...
Camera Life 2.6.2b4 Arbitrary File Upload Vulnerability
No description provided by source. + CameraLife-2.6.2b4 Arbitrary File Upload Vulnerability + Author:Mi4night + Version:cameralife-2.6.2b4 + Download Script: + http://sourceforge.net/project/showfiles.php?groupid=70910&packageid=70316&releaseid=628868 + Exploit: +...
CVE-2008-3881
Multiple cross-site scripting XSS vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified "zmhtmlview.php" files...
Aardvark Topsites <= 4.2.2 Remote File Inclusion Vulnerability
The remote system contains a PHP application that is prone to remote file inclusions attacks. Description : Aardvark Topsites PHP is installed on the remote host. It is an open source Toplist management system written in PHP. The application does not sanitize user-supplied input to the...
Unrestricted file upload
Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to the file in billeder/...
CVE-2008-2988
Unrestricted file upload vulnerability in admin/upload.php in Benja CMS 0.1 allows remote attackers to upload and execute arbitrary PHP files via unspecified vectors, followed by a direct request to the file in billeder/...
Unrestricted file upload
Unrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote authenticated administrators to upload and execute arbitrary PHP files via the Upload section in the Write Tabs area of the dashboard...
WordPress <= 2.5.1 - Unrestricted file upload
Because of this vulnerability, the authenticated administrators can upload and execute arbitrary PHP files via the Upload section. Solution Update WordPress...
WordPress cat参数目录遍历漏洞
BUGTRAQ ID: 28845 WordPress是一款免费的论坛Blog系统。 在WordPress的wp-includes/theme.php文件的getcategorytemplate函数中，没有正确地过滤对index.php所传送的cat参数便将其用在了template-loader.php文件中，这可能允许攻击者通过目录遍历攻击包含本地资源的任意PHP文件。 成功利用这个漏洞要求将WordPress安装在了Windows平台上且攻击者拥有在受影响系统上存储PHP文件的权限。 WordPress 2.3.3 临时解决方法：...
Unrestricted file upload
Unrestricted file upload vulnerability in the fileupload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file...
CVE-2008-1988
Unrestricted file upload vulnerability in the fileupload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file...
CVE-2008-1988
CVE-2008-1988 describes an unrestricted file upload in EncapsGallery 2.0.2. The flaw exists in the file_upload function of core/misc.class.php, allowing remote authenticated administrators to upload and execute arbitrary PHP files by using an executable extension, then accessing the file directly...