15 matches found
EUVD-2007-1135
Malware in sbrugna...
Plantilla list_main_pages.php nfolder Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/22669/info Simple Plantilla PHP is prone to multiple input-validation issues, including a local file-include vulnerability and an arbitrary file-upload vulnerability. Attackers can exploit the local file-include...
Toronja CMS - SQL Injection
Toronja CMS - SQL Injection =============================================== toronja cms SQL Injection Vulnerability =============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || toronja cms SQL Injection...
CVE-2007-1138
Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...
CVE-2007-1139
Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP SPP allows remote attackers to upload arbitrary scripts via a filename with a double extension...
CVE-2007-1139
Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP SPP allows remote attackers to upload arbitrary scripts via a filename with a double extension...
Unrestricted file upload
Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP SPP allows remote attackers to upload arbitrary scripts via a filename with a double extension...
CVE-2007-1138
Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...
CVE-2007-1138
CVE-2007-1138 affects Cromosoft Simple Plantilla PHP (SPP). A vulnerability in list_main_pages.php allows absolute path traversal via the nfolder parameter, enabling remote attackers to list arbitrary directories and read arbitrary files. The issue is rooted in an improper handling of absolute pa...
CVE-2007-1139
CVE-2007-1139 describes an unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP). The flaw allows remote attackers to upload arbitrary scripts by using a filename with a double extension, enabling potential code execution or defacement on the affected server. The NVD entr...
CVE-2007-1138: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...
CVE-2007-1139: Improper Control of Generation of Code
Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP SPP allows remote attackers to upload arbitrary scripts via a filename with a double extension...
plantilla.txt
Plantilla PHP Simple local file include vulnerability: /zadminxx/listmainpages.php?nfolder=/etc/ file upoad vulnerability: upload any-script with a double extension .. laurent gaffié...
Plantilla - list_main_pages.php?nfolder Traversal Arbitrary File Access
Plantilla - listmainpages.php?nfolder Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22669/info Simple Plantilla PHP is prone to multiple input-validation issues, including a local file-include vulnerability and an arbitrary file-upload vulnerability. Attackers can...
Plantilla - 'list_main_pages.php?nfolder' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22669/info Simple Plantilla PHP is prone to multiple input-validation issues, including a local file-include vulnerability and an arbitrary file-upload vulnerability. Attackers can exploit the local file-include vulnerability using directory-traversal...