Advanced Electron Forum 1.0.6 - Remote Code Execution

GulfTech Security Research September 20, 2008 Vendor : Electron Inc. URL : http://www.anelectron.com/ Version : AEF Forum = 1.0.6 Risk : Remote Code Execution Description: Advanced Electron Forum also known as AEF Forum is a full featured online forum system written in php that allows webmasters...

CVE-2008-4115

TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

CVE-2008-4115

TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

CVE-2008-4115

CVE-2008-4115 : The vulnerability affects TalkBack 2.3.6, where a remote attacker can disclose configuration information by directly requesting install/info.php, which calls the phpinfo function. The root cause is the information disclosure via phpinfo exposure through a non-authenticated, remote...

Information disclosure

TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

CVE-2008-4115: Exposure of Sensitive Information to an Unauthorized Actor

TalkBack 2.3.6 allows remote attackers to obtain configuration information via a direct request to install/info.php, which calls the phpinfo function...

Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure Vulns

No description provided by source. + Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion PoC 1 :...

talkback-lfidisclose.txt

Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion PoC 1 : http://target/path/comments.php?language=Local File%00 Example 1 :...

Talkback 2.3.6 - Multiple Local File Inclusion PHPInfo Disclosure Vulnerabilities

Talkback 2.3.6 - Multiple Local File Inclusion PHPInfo Disclosure Vulnerabilities + Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion...

Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure Vulns

Exploit for unknown platform in category web applications ===================================================================== Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure Vulns ===================================================================== + Talkback 2.3.6 Multiple Loc...

Talkback 2.3.6 - Multiple Local File Inclusion / PHPInfo Disclosure Vulnerabilities

Talkback 2.3.6 Multiple Local File Inclusion/PHPInfo Disclosure + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Local File Inclusion PoC 1 : http://target/path/comments.php?language=Local File%00 Example 1 :...

Multiple Vulnerabilities in AWStats Totals

Emory University UTS Security Advisory EMORY-2008-01 Topic: Multiple Vulnerabilities in AWStats Totals Original release date: August 26, 2008 SUMMARY ======= Telartis's AWStats Totals program is vulnerable to command execution and cross site scripting attacks. A remote attacker could exploit thes...

LoveCMS 1.6.2 Final Remote Code Execution Exploit

No description provided by source. !/usr/bin/ruby Exploit by PoMdaPiMp! --------------------- pomdapimpatgmaildotcom LoveCMS Exploit Series Episode 1: adding a side block Description: add some php into a block container on the side of the site. phpinfo is called. Usage: ./LoveCMS1blocks.rb host E...

LoveCMS 1.6.2 Final - Remote Code Execution

LoveCMS 1.6.2 Final - Remote Code Execution !/usr/bin/ruby Exploit by PoMdaPiMp! --------------------- pomdapimpatgmaildotcom LoveCMS Exploit Series Episode 1: adding a side block Description: add some php into a block container on the side of the site. phpinfo is called. Usage: ./LoveCMS1blocks....

LoveCMS 1.6.2 Final - Remote Code Execution

!/usr/bin/ruby Exploit by PoMdaPiMp! --------------------- pomdapimpatgmaildotcom LoveCMS Exploit Series Episode 1: adding a side block Description: add some php into a block container on the side of the site. phpinfo is called. Usage: ./LoveCMS1blocks.rb Ex: ./LoveCMS1blocks.rb...

Information disclosure

XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function...

CVE-2008-3400

XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function...

CVE-2008-3400

XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function...

CVE-2008-3400

CVE-2008-3400 affects XRMS CRM 1.99.2. The vulnerability stems from a direct request to tests/info.php, which calls phpinfo and exposes configuration information to remote attackers. Public references indicate available exploits (e.g., Exploit-DB) and advisories, confirming external reachability ...

CVE-2008-3400: Exposure of Sensitive Information to an Unauthorized Actor

XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function...