22 matches found
EUVD-2005-2252
Malware in sbrugna...
EUVD-2001-1448
Malware in sbrugna...
phpSecurePages <= 0.28b (secure.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== phpsecurepages cfgProgDir Remote File Include Vulnerability =============================================================================================== Critical...
PhpSecurePages secure.php cfgProgDir Parameter PHP Code Execution - Ver2 (CVE-2001-1468)
A code execution vulnerability has been reported in phpSecurePages. A remote attacker could trigger this vulnerability by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code. Successful exploitation of this vulnerability could allow a remote attacke...
PhpSecurePages secure.php cfgProgDir Parameter PHP Code Execution - Ver2 (CVE-2001-1468)
A code execution vulnerability has been reported in phpSecurePages. A remote attacker could trigger this vulnerability by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code. Successful exploitation of this vulnerability could allow a remote attacke...
phpsecurepages (cfgProgDir) Remote File Include Vulnerability
============================================================================================== phpsecurepages cfgProgDir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous Download from :...
PHPSecurePages 0.28b - secure.php Remote File Inclusion
PHPSecurePages 0.28b - secure.php Remote File Inclusion ============================================================================================== phpsecurepages cfgProgDir Remote File Include Vulnerability...
phpSecurePages <= 0.28b (secure.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== phpsecurepages cfgProgDir Remote File Include Vulnerability =============================================================================================== Critical...
PHPSecurePages 0.28b - 'secure.php' Remote File Inclusion
============================================================================================== phpsecurepages cfgProgDir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous Download from :...
phpSecurePages <= 0.28b (secure.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== phpSecurePages = 0.28b secure.php Remote File Include Vulnerability ======================================================================...
CVE-2005-2251
CVE-2005-2251 documents a PHP remote file inclusion vulnerability in phpSecurePages (PHPSecurePages/phpSP) 0.28beta and earlier. The issue is triggered via the cfgProgDir parameter, allowing a remote attacker to include code from a URL on a remote Web server and execute arbitrary PHP, a variant o...
CVE-2005-2251
PHP remote file inclusion vulnerability in secure.php in PHPSecurePages phpSP 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468...
phpSecurePages cfgProgDir Variable File Include Vulnerabilities
The remote host is running phpSecurePages, a PHP module used to secure pages with a login name / password. The installed version of phpSecurePages allows remote attackers to control the 'cfgProgDir' variable used when including PHP code in several of the application's scripts. By leveraging this...
[SA15994] phpSecurePages "cfgProgDir" File Inclusion Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2001-1468
MODE C CVE-2001-1468 describes a PHP remote file inclusion in phpSecurePages where checklogin.php (and related components) allows arbitrary code execution if an attacker modifies the cfgProgDir parameter to reference a URL on a remote server. Connected advisories reiterate a code-execution vulner...
CVE-2001-1468
PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code...
Security Patchs for PHP Products
PHPSecure made some patchs for security holes in PHP products. Here is the list : - ALP - Banner Ad 2.0 : http://www.phpsecure.org/index.php?id=1&zone=pDl More details : http://online.securityfocus.com/search?category=22&query=ALP - Tight Auction 3.0 :...
phpSecurePages & Killer Protection ( PHP )
1 Informations : °°°°°°°°°°°°°° Product : phpSecurePages Tested version : 0.27b Website : http://www.phpsecurepages.f2s.com Problem : include file PHP Code : °°°°°°°°°° -------------- checklogin.php --------------------- if !$login // no login available include$cfgProgDir . "interface.php"; exit;...
phpSecurePages allows remote code execution
Overview There is an input validation vulnerability in phpSecurePages that may allow a remote intruder to execute arbitrary code with the privileges of the running web server. Description phpSecurePages is a tool for password protecting portions of websites on PHP enabled webservers. The...
(SRADV00009) Remote command execution vulnerabilities in phpSecurePages
================================================= Secure Reality Pty Ltd. Security Advisory 9 SRADV00009 http://www.securereality.com.au ================================================= Title Remote command execution vulnerabilities in phpSecurePages Released 2/7/2001 Vulnerable Versions up to a...