EUVD-2008-1646

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in body.php in phpSpamManager phpSM 0.53 beta allows remote attackers to read arbitrary local files via a .. dot dot in the filename parameter...

CVE-2008-1645

CVE-2008-1645 affects phpSpamManager (phpSM) 0.53 beta. The vulnerability is a directory traversal in body.php where a crafted filename parameter containing ".." allows a remote attacker to read arbitrary local files. This is a path traversal weakness in the file handling logic. Exploitation stat...

phpSpamManager 0.53b (body.php) Remote File Disclosure Vulnerability

No description provided by source. phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME'...

phpspamman-disclose.txt

phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME' debugprint"analysing " .$filename;...

PHPSpamManager 0.53b - body.php Remote File Disclosure

PHPSpamManager 0.53b - body.php Remote File Disclosure phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if...

phpSpamManager 0.53b (body.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== phpSpamManager 0.53b body.php Remote File Disclosure Vulnerability ==================================================================== phpSpamManager 0.53 beta body.php...

PHPSpamManager 0.53b - 'body.php' Remote File Disclosure

phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME' debugprint"analysing " .$filename;...