EUVD-2008-1646

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in body.php in phpSpamManager phpSM 0.53 beta allows remote attackers to read arbitrary local files via a .. dot dot in the filename parameter...

CVE-2008-1645

CVE-2008-1645 affects phpSpamManager (phpSM) 0.53 beta. The vulnerability is a directory traversal in body.php where a crafted filename parameter containing ".." allows a remote attacker to read arbitrary local files. This is a path traversal weakness in the file handling logic. Exploitation stat...

CVE-2008-1645: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in body.php in phpSpamManager phpSM 0.53 beta allows remote attackers to read arbitrary local files via a .. dot dot in the filename parameter...

phpSpamManager 0.53b (body.php) Remote File Disclosure Vulnerability

No description provided by source. phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME'...

phpspamman-disclose.txt

phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME' debugprint"analysing " .$filename;...

PHPSpamManager 0.53b - body.php Remote File Disclosure

PHPSpamManager 0.53b - body.php Remote File Disclosure phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if...

PHPSpamManager 0.53b - 'body.php' Remote File Disclosure

phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME' debugprint"analysing " .$filename;...

phpSpamManager 0.53b (body.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== phpSpamManager 0.53b body.php Remote File Disclosure Vulnerability ==================================================================== phpSpamManager 0.53 beta body.php...