320 matches found
CVE-2006-3532
PHP file inclusion vulnerability in includes/editnew.php in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Pathsextensionspath parameter...
CVE-2006-3533
Multiple cross-site scripting XSS vulnerabilities in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 fg, 2 line1, 3 line2, 4 bg, 5 c1, 6 c2, 7 c3, and 8 c4 parameters in a includes/blogroll.php; 9 name and 10...
CVE-2006-3532
Pivot 1.30 RC2 and earlier are affected by a PHP file inclusion vulnerability in includes/edit_new.php when register_globals is enabled. An attacker can supply a FTP URL or full file path in Paths[extensions_path] to execute arbitrary PHP code remotely. The issue enables partial impact to confide...
CVE-2006-3533
Pivot 1.30 RC2 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. When register_globals is enabled, attackers can inject arbitrary web script or HTML via the parameters fg, line1, line2, bg, c1, c2, c3, c4 in includes/blogroll.php; name and js_name in includes/editor...
CVE-2006-3531
Pivot 1.30 RC2 and earlier are affected by CVE-2006-3531 due to authentication credentials being constructed from request parameters in includes/editor/insert_image.php. This enables remote attackers to escalate privileges and upload arbitrary files by modifying (1) pass, (2) session, (3) pass an...
CVE-2006-3531
includes/editor/insertimage.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, which allows remote attackers to obtain privileges and upload arbitrary files via modified 1 pass and 2 session parameters, and 3 pass and 4 userlevel indices of the a PivotVars o...
pivot130rc2.php.txt
!/usr/bin/php -q -d shortopentag=on ? echo "Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dorks: "Powered byPivot"\n"; echo "version specific: "Powered byPivot - 1.30 RC2"...
Pivot <= 1.30 RC2 Privileges Escalation/Remote Code Execution Exploit
Exploit for unknown platform in category web applications ===================================================================== Pivot = 1.30 RC2 Privileges Escalation/Remote Code Execution Exploit ===================================================================== !/usr/bin/php -q -d...
Pivot <= 1.30 RC2 Privileges Escalation/Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dorks: "Powered byPivot"\n"; echo "version...
Pivot 1.30 RC2 - Privilege Escalation / Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ? echo "Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dorks: "Powered byPivot"\n"; echo "version specific: "Powered byPivot - 1.30 RC2"...
File Inclusion Vulnerability in Pivot
Pivot is a set of PHP scripts designed to maintain dynamic web pages. There is a flaw in the file moduledb.php which may let an attacker execute arbitrary commands on the remote host by forcing the remote Pivot installation to include a PHP file hosted on an arbitrary third-party website...
Pivot 1.20 Beta 3 - admin & shell
oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: Pivot 1.20 Beta 3 - admin & shell Bug found by: тёмыч Date: 9.12.2004 Pivot 1.20 Beta 3 script author: http://www.pivotlog.net google:...
[UNIX] Pivot Remote Code Execution Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
pivot1.1.0SoundwaveAdv.txt
Pivot 1.10 Soundwave - Remote Code Execution -------------------------------------------- loofus - 0x90.org Greets: ------- Downbload, nummish, peace, war-cow & the rest of 0x90.org Description: ------------ Pivot is a tool to create weblogs, without the need of a database. Pivot is easy to setup...
Pivot 1.0 - module_db.php Remote File Inclusion
Pivot 1.0 - moduledb.php Remote File Inclusion source: https://www.securityfocus.com/bid/10553/info It has been reported that Pivot is affected by a remote file include vulnerability contained within the moduledb.php script. This issue is due to a failure of the application to properly sanitize...
Pivot 1.0 - 'module_db.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/10553/info It has been reported that Pivot is affected by a remote file include vulnerability contained within the moduledb.php script. This issue is due to a failure of the application to properly sanitize user-supplied input before including it as a...
Security update 1970-01-01
...
Security update 1970-01-01
...