EUVD-2007-6154

Malware in sbrugna...

EUVD-2011-3730

Malware in sbrugna...

EUVD-2007-6143

Malware in sbrugna...

PHPDevShell 3.2.0 Cross Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/PHPDEVSHELL-XSS.txt Vendor =================== www.phpdevshell.org Product: ================== PHPDevShell V3.2.0 PHPDevShell is a RAD Framework aimed at developing administrative...

CVE-2011-3773

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

Information disclosure

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

CVE-2011-3773

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

CVE-2011-3773: Exposure of Sensitive Information to an Unauthorized Actor

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

PT-2011-4663

Name of the Vulnerable Software and Affected Versions PHPDevShell version 3.0.0-Beta-4b Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by requesting the gzip.php file, which reveals the installation path in a...

Code injection

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6186

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6174

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information...

Information disclosure

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information...

CVE-2007-6186: Undefined Security Weakness

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6174: Undefined Security Weakness

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information...

CVE-2007-6186

Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & optimize database."...

CVE-2007-6186

Technical details about CVE-2007-6186 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2007-6174

PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. NOTE: some of these details are obtained from third party information...

CVE-2007-6174

CVE-2007-6174 affects PHPDevShell prior to 0.7.0. The vuln allows remote authenticated users to escalate privileges by sending a crafted request to update a user profile, leading to complete confidentiality, integrity, and availability impact as per CVSS metrics (base score 8.5, HIGH). Root cause...