FreeBSD Ports: pivot-weblog

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : pivot-weblog -- file deletion vulnerability (0fe73a4a-1b18-11de-8226-0030843d3802)

Secunia reports : A vulnerability has been discovered in Pivot, which can be exploited by malicious people to delete certain files. Input passed to the 'refkey' parameter in extensions/bbclonetools/count.php is not properly sanitised before being used to delete files. This can be exploited to...

Pivot 1.40.6 File Deletion

Pivot 1.40.6 Remote File Delete Alfons Luja Vuln : extensions/bbclonetools/hrconf.php line 20 ... $bbclonedebug = false; //is never change ... ========================================================= extensions/bbclonetools/count.php ... if $GET"refkey"!="" && fileexists"$refkeydir/".$GET"refkey...

Pivot 1.40.6 Remote Arbitrary File Deletion Vulnerability

No description provided by source. Pivot 1.40.6 Remote File Delete Alfons Luja Vuln : extensions/bbclonetools/hrconf.php line 20 ... $bbclonedebug = false; //is never change ... ========================================================= extensions/bbclonetools/count.php ... if $GET"refkey"!="" &&...

Pivot 1.40.6 Remote Arbitrary File Deletion Vulnerability

Exploit for unknown platform in category web applications ========================================================= Pivot 1.40.6 Remote Arbitrary File Deletion Vulnerability ========================================================= Pivot 1.40.6 Remote File Delete Alfons Luja Vuln :...

Pivot 1.40.6 - Arbitrary File Deletion

Pivot 1.40.6 - Arbitrary File Deletion Pivot 1.40.6 Remote File Delete Alfons Luja Vuln : extensions/bbclonetools/hrconf.php line 20 ... $bbclonedebug = false; //is never change ... ========================================================= extensions/bbclonetools/count.php ... if $GET"refkey"!=""...

pivot-weblog -- file deletion vulnerability

Secunia reports: A vulnerability has been discovered in Pivot, which can be exploited by malicious people to delete certain files. Input passed to the "refkey" parameter in extensions/bbclonetools/count.php is not properly sanitised before being used to delete files. This can be exploited to dele...

CVE-2008-3128

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...

Directory traversal

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...

CVE-2008-3128

The provided documents describe CVE-2008-3128 as a directory traversal vulnerability in Pivot 1.40.5: in search.php, a crafted t parameter containing .. enables remote reading of arbitrary files. This is the only concrete detail across sources; no exploits, affected versions beyond Pivot 1.40.5, ...

CVE-2008-3128

Directory traversal vulnerability in search.php in Pivot 1.40.5 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...

Pivot 1.40.5 Dreamwind load_template() Credentials Disclosure Exploit

No description provided by source. ?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind' -pivotlog.net...

pivot-disclosure.txt

?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind' -pivotlog.net vulnerability: search.php - lines 98-109: ... ...

Pivot t参数目录遍历漏洞

BUGTRAQ ID: 30012 Pivot是一款基于WEB的帮助用户维护动态站点的工具。 Pivot的search.php文件没有正确过滤对t参数输入的便返回用于显示文件： ... // Set the template for the tags page if !isset$PivotVars't' || empty$PivotVars't' if isset$Weblogs$Currentweblog'extratemplate' && $Weblogs$Currentweblog'extratemplate'!="" $template =...

Pivot 1.40.5 - Dreamwind load_template() Credentials Disclosure

Pivot 1.40.5 - Dreamwind loadtemplate Credentials Disclosure ?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind'...

Pivot 1.40.5 Dreamwind load_template() Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================================== Pivot 1.40.5 Dreamwind loadtemplate Credentials Disclosure Exploit ===================================================================== ?php / Pivot 1.40.5 'Dreamwind'...

Pivot 1.40.5 - Dreamwind 'load_template()' Credentials Disclosure

?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind' -pivotlog.net vulnerability: search.php - lines 98-109: ... ...

CVE-2006-3531

includes/editor/insertimage.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified 1 pass and 2 session parameters, and 3 pass and 4 userlevel indices of the a PivotVars o...

CVE-2006-3533

Multiple cross-site scripting XSS vulnerabilities in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 fg, 2 line1, 3 line2, 4 bg, 5 c1, 6 c2, 7 c3, and 8 c4 parameters in a includes/blogroll.php; 9 name and 10...

CVE-2006-3532

PHP file inclusion vulnerability in includes/editnew.php in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Pathsextensionspath parameter...