EUVD-2006-4200

Malware in sbrugna...

EUVD-2007-6437

Malware in sbrugna...

PHPay 2.2 Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7310/info It has been reported that user-supplied input to phPay is not sufficiently sanitized. This lack of sanitization provides an opportunity for an attacker to launch cross-site scripting attacks. It is possible for ...

phPay 2.2.1 Windows Installations Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26881/info phPay is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. The vulnerability resides in code that was intended to protect against file-include attacks. It wa...

phPay 2.2a - Backup Vulnerability

No description provided by source. ======================================================================================== $ | Title : phPay V2.2a Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

phPay <= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit

No description provided by source. !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford xbefordx gmail com Vulnerability: mail Injection Vuln Code: ?php if eregnumail.inc.php, $SCRIPTNAME headerLocation:./index.html; elseif eregnumail.inc.php,...

PHPay 2.2 - Multiple Path Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/7309/info phPay has been reported prone to multiple path disclosure vulnerabilities. It has been reported that when specially crafted requests are made for many phPay pages and include files, an error condition may be...

phPay 2.2a Backup Disclosure

======================================================================================== $ | Title : phPay V2.2a Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : | | CVE-ID : | |...

phPay 2.2a - Backup

phPay 2.2a - Backup ======================================================================================== $ | Title : phPay V2.2a Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID ...

phPay V2.2a Backup Vulnerability

No description provided by source. ======================================================================================== $ | Title : phPay V2.2a Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

phPay V2.2a Backup Vulnerability

Exploit for unknown platform in category web applications ================================ phPay V2.2a Backup Vulnerability ================================ ======================================================================================== $ | Title : phPay V2.2a Backup Vulnerability | |...

phPay 2.2a - Backup

======================================================================================== $ | Title : phPay V2.2a Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : | | CVE-ID : | |...

Directory traversal

Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ dot dot backslash in the config parameter...

CVE-2007-6471

Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ dot dot backslash in the config parameter...

CVE-2007-6471

Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ dot dot backslash in the config parameter...

CVE-2007-6471

CVE-2007-6471 affects phPay 2.02.01 on Windows. An incomplete blacklist in main.php allows remote attackers to perform directory traversal (via ..) in the config parameter, enabling inclusion and execution of arbitrary local files. No exploit details or fix are provided in the connected documents...

phpay-lfi.txt

By Michael Brooks Vulnerability Type:Local File Inclusion Software: Phpay Homepage:http://sourceforge.net/projects/phpay/ Version Affected:2.02.1 Phpay has been affected by multiple local file include flaws, as a result this patch was written: $config = eregreplace":","", $config; $config =...

Phpay - Local File Inclusion

By Michael Brooks Vulnerability Type:Local File Inclusion Software: Phpay Homepage:http://sourceforge.net/projects/phpay/ Version Affected:2.02.1 Phpay has been affected by multiple local file include flaws, as a result this patch was written: $config = eregreplace":","", $config; $config =...

phPay 2.2.1 - Windows Installations Local File Inclusion

phPay 2.2.1 - Windows Installations Local File Inclusion source: https://www.securityfocus.com/bid/26881/info phPay is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. The vulnerability resides in code that was intended to protect against...

phPay 2.2.1 - Windows Installations Local File Inclusion

source: https://www.securityfocus.com/bid/26881/info phPay is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. The vulnerability resides in code that was intended to protect against file-include attacks. It was found that the protection routin...