Design/Logic Flaw

Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism...

PHP application vulnerability causes and prevention methods-vulnerability warning-the black bar safety net

Abuse include 1. Vulnerability reasons: The Include is to write a PHP website, the most commonly used functions, and supports relative paths. There are many PHP scripts directly to an input variable as the Include parameter, causing any references to scripts, an absolute path leaks and other...

Seo Panel 2.1.0 - Critical File Disclosure

Seo Panel - Critical File Disclosure Versions Affected: 2.1.0 previous versions were not checked. Info: A complete open source seo control panel for managing search engine optimization of your websites. Seo Panel is a seo tool kit includes latest hot seo tools to increase and track the performace...

Zen Cart 1.3.9h Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================== Zen Cart 1.3.9h Local File Inclusion Vulnerability ================================================== Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore...

Zen Cart 1.3.9h - Local File Inclusion

Zen Cart 1.3.9h Local File Inclusion Vulnerability Name Zen Cart Vendor http://www.zen-cart.com Versions Affected 1.3.9h Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-11-03 X. INDEX I. ABOUT THE APPLICATION II...

Canteen Joomla Component 1.0 Multiple Remote Vulnerabilities

Canteen Joomla Component 1.0 Multiple Remote Vulnerabilities Name Canteen Vendor http://www.miniwork.eu Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-04-07 X. INDEX I. ABOUT THE APPLICATION II...

Family Connections 2.2.3 Multiple Remote Vulnerabilities

Family Connections 2.2.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected 2.2.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-05 X. INDEX I. ABOUT THE...

family connections 2.2.3 - Multiple Vulnerabilities

Family Connections 2.2.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected 2.2.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-10-05 X. INDEX I. ABOUT THE...

CVE-2009-3600

HUBScript 1.0 allows remote attackers to obtain configuration information via a direct request to manage/phpinfo.php, which calls the phpinfo function...

Discloser 0.0.4-rc2 (index.php more) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Discloser 0.0.4-rc2 index.php more SQL Injection Vulnerability ================================================================ Salvatore "drosophila" Fresta + Application:...

Discloser 0.0.4-rc2 - index.php?more SQL Injection

Discloser 0.0.4-rc2 - index.php?more SQL Injection Salvatore "drosophila" Fresta + Application: Discloser + Version: 0.0.4-rc2 + Website: http://discloser.sourceforge.net/ + Bugs: A SQL Injection + Exploitation: Remote + Date: 21 Feb 2004 + Discovered by: Salvatore Fresta aka drosophila + Author:...

Discloser 0.0.4-rc2 - 'index.php?more' SQL Injection

Salvatore "drosophila" Fresta + Application: Discloser + Version: 0.0.4-rc2 + Website: http://discloser.sourceforge.net/ + Bugs: A SQL Injection + Exploitation: Remote + Date: 21 Feb 2004 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Fresta aka drosophila + E-mail:...

Sql injection

SQL injection vulnerability in Load.php in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the dbcharacterset parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" backslash...

CVE-2008-6741

SQL injection vulnerability in Load.php in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the dbcharacterset parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" backslash...

CVE-2008-6741

SQL injection vulnerability in Load.php in Simple Machines Forum SMF 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands by setting the dbcharacterset parameter to a multibyte character set such as big5, which causes the addslashes PHP function to produce a "" backslash...

PT-2009-41: Multiple vulnerabilities in Kayako Support Suite

Vulnerability Description Positive Technologies Research Team discovered several Installation Path Disclosure vulnerabilities in Kayako Support Suite. The application uses a vulnerable PHP function unserialize, which allows an attacker to disclose the product installation path. In addition, there...

RoundCube Webmail 0.2-3 Beta Code Execution

Public Release Date of POC: 2008-12-22 Author: Jacobo Avariento Gimeno Sofistic CVE id: CVE-2008-5619 Bugtraq id: 32799 Severity: Critical Vulnerability reported by: RealMurphy Intro ---- Roundcube Webmail is a browser-based IMAP client that uses "chuggnutt.com HTML to Plain Text Conversion"...

RoundCube Webmail <= 0.2-3 beta Code Execution Vulnerability

No description provided by source. Public Release Date of POC: 2008-12-22 Author: Jacobo Avariento Gimeno Sofistic CVE id: CVE-2008-5619 Bugtraq id: 32799 Severity: Critical Vulnerability reported by: RealMurphy Intro ---- Roundcube Webmail is a browser-based IMAP client that uses "chuggnutt.com...

Roundcube Webmail 0.2-3 Beta - Code Execution

Public Release Date of POC: 2008-12-22 Author: Jacobo Avariento Gimeno Sofistic CVE id: CVE-2008-5619 Bugtraq id: 32799 Severity: Critical Vulnerability reported by: RealMurphy Intro ---- Roundcube Webmail is a browser-based IMAP client that uses "chuggnutt.com HTML to Plain Text Conversion"...

CVE-2008-3922

awstatstotals.php in AWStats Totals 1.0 through 1.14 allows remote attackers to execute arbitrary code via PHP sequences in the sort parameter, which is used by the multisort function when dynamically creating an anonymous PHP function...