114 matches found
phpThumb < 1.7.9 Command Injection Vulnerability
phpThumb is prone to a command injection vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
phpThumb Command-Injection Vulnerability
It has recently come to our attention that phpThumb all versions contains an unpatched vulnerability. The application is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input to the ’fltr’ parameter in the ’phpThumb.php’ script. Attackers can explo...
Plogger - Remote File Disclosure
Plogger - Remote File Disclosure Plogger Remote File Disclosure Vulnerability http://www.plogger.org/ dork : Powered by Plogger! author: Mr.tro0oqy yemeni hacker email : [email protected] exp : Line 117: if $fpsource = @fopen$GET'src','rb'...
Plogger - Remote File Disclosure
Plogger Remote File Disclosure Vulnerability http://www.plogger.org/ dork : Powered by Plogger! author: Mr.tro0oqy yemeni hacker email : [email protected] exp : Line 117: if $fpsource = @fopen$GET'src','rb'...
phpThumb Detection (HTTP)
HTTP based detection of phpThumb. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801232";...
CVE-2010-1598
phpThumb.php in phpThumb 1.7.9 and possibly other versions, when ImageMagick is installed, allows remote attackers to execute arbitrary commands via the fltr parameter, as discovered in the wild in April 2010. NOTE: the provenance of this information is unknown; the details are obtained solely fr...
CVE-2010-1598: Improper Input Validation
phpThumb.php in phpThumb 1.7.9 and possibly other versions, when ImageMagick is installed, allows remote attackers to execute arbitrary commands via the fltr parameter, as discovered in the wild in April 2010. NOTE: the provenance of this information is unknown; the details are obtained solely fr...
Joomla! Component com_portfolio - Local File Disclosure
Joomla compnent comportfolio Local File Disclosure author : Mr.tro0oqy from comunity college : email : [email protected] greetz:alzomer , Mr.ksoory , R3d-D3vil from palstine .. dork :inurl:index.php?option=comportfolio exp:...
magazin-disclose.txt
\|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ / --------------------------------------------------------------------- ! Portal...
Directory traversal
Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the src parameter...
CVE-2005-1898
The passthrough functionality in phpThumb.php in phpThumb before 1.5.4 allows remote attackers to read files that are not images...
CVE-2005-1898
The CVE-2005-1898 issue affects phpThumb() in phpThumb prior to 1.5.4. The passthrough functionality can allow remote attackers to read files that are not images, enabling unintended disclosure of server-side files. Root cause is the passthrough handling not restricting file types. Impact is pote...
CVE-2005-1898
The passthrough functionality in phpThumb.php in phpThumb before 1.5.4 allows remote attackers to read files that are not images...
[SA15534] phpThumb() "src" Exposure of Sensitive Information
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...