124 matches found
PHP 4.4.4 - Unserialize() ZVAL Reference Counter Overflow (PoC)
PHP 4.4.4 - Unserialize ZVAL Reference Counter Overflow PoC ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code...
PHP <= 4.4.4 unserialize() ZVAL Reference Counter Overflow Exploit PoC
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
MOPB-04-2007:PHP 4 unserialize() ZVAL Reference Counter Overflow
Summary The Month of PHP Bugs started with one of the possible ways to exploit the 16bit reference counter of PHP 4. It was only exploitable with local access. However because PHP does not protect against these overflows anywhere there are other exploit vectors. With unserialize it is triggerable...
PHPBB2 - 'Admin_Ug_Auth.php' Administrative Bypass
source: https://www.securityfocus.com/bid/22730/info PHPBB2 is prone to a vulnerability that will let attackers gain administrative access to the application because it fails to properly validate access. Successful exploits may result in a complete compromise of vulnerable applications. User Leve...
PHPBB2 - Admin_Ug_Auth.php Administrative Bypass
PHPBB2 - AdminUgAuth.php Administrative Bypass source: https://www.securityfocus.com/bid/22730/info PHPBB2 is prone to a vulnerability that will let attackers gain administrative access to the application because it fails to properly validate access. Successful exploits may result in a complete...
Remote file inclusion
PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-0656
PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-0656
CVE-2007-0656 is a PHP remote file inclusion vulnerability affecting phpBB2-MODificat 0.2.0 and earlier. The flaw exists in includes/functions.php where an attacker can cause remote PHP code execution by supplying a URL via the phpbb_root_path parameter. Affected software is phpBB2-MODificat vers...
CVE-2007-0656: Undefined Security Weakness
PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
PHPBB2 Modificat PHPBB_Root_Path远程文件包含漏洞
PHPBB2 Modificat是一款基于PHP的WEB应用程序。 PHPBB2 Modificat不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'functions.php'脚本对用户提交的'PHPBBRootPath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 phpBB2-MODificat phpBB2-MODificat 0.2 目前没有解决方案提供,请关注以下链接： http://sourceforge.net/project/showfiles.php?groupid=110366...
phpbb2-rfi.txt
----------------------------------------------- phpBB2 MODificat phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz ----------------------------------------------- Code: includeonce $phpbbrootpath...
phpBB2 MODificat <= 0.2.0 (functions.php) Remote Include Vulnerability
No description provided by source. ----------------------------------------------- phpBB2 MODificat phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz ----------------------------------------------- Code: includeonce $phpbbrootpath...
phpBB2 MODificat <= 0.2.0 (functions.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== phpBB2 MODificat = 0.2.0 functions.php Remote Include Vulnerability ======================================================================...
PHPBB2 MODificat 0.2.0 - functions.php Remote File Inclusion
PHPBB2 MODificat 0.2.0 - functions.php Remote File Inclusion ----------------------------------------------- phpBB2 MODificat phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz ----------------------------------------------- Code:...
phpBB2 MODificat (phpbb_root_path) Remote File Include Exploit
----------------------------------------------- phpBB2 MODificat phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz ----------------------------------------------- Code: includeonce $phpbbrootpath...
PHPBB2 MODificat 0.2.0 - 'functions.php' Remote File Inclusion
----------------------------------------------- phpBB2 MODificat phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz ----------------------------------------------- Code: includeonce $phpbbrootpath...
CVE-2006-6842
The CVE-2006-6842 entry describes an SQL injection vulnerability in admin/admin_acronyms.php of Acronym Mod 0.9.5 for phpBB2 Plus 1.53, allowing remote attackers to execute arbitrary SQL commands via the id parameter. Public references (e.g., Exploit-DB 3033) indicate known exploits. Affected com...
CVE-2006-6842
SQL injection vulnerability in admin/adminacronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.53 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-6842: Undefined Security Weakness
SQL injection vulnerability in admin/adminacronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.53 allows remote attackers to execute arbitrary SQL commands via the id parameter...