Pluck CMS 4.6.1 - 'module_pages_site.php' Local File Inclusion

", "../apache/logs/access.log", "../../apache/logs/access.log", "../../../apache/logs/access.log", "../../../../apache/logs/access.log", "../../../../../apache/logs/access.log", "../../../...

Pluck g_pcltar_lib_dir参数本地文件包含漏洞

BUGTRAQ ID: 32342 pluck是用php编写的简单内容管理系统。 pluck的data/inc/lib/pcltar.lib.php文件没有正确地验证对gpcltarlibdir参数的输入便用于包含文件： if !isset$gpcltarlibdir $gpcltarlibdir = "lib"; ... $gpcltarextension = "php"; if !defined"PCLERRORLIB" include"data/inc/$gpcltarlibdir/pclerror.lib.$gpcltarextension"; if...

Pluck CMS 4.5.3 (g_pcltar_lib_dir) Local File Inclusion Vulnerability

No description provided by source. Hello, bugtraq. Digital Security Research Group DSecRG Advisory DSECRG-08-039 Application: Pluck CMS Versions Affected: 4.5.3 Vendor URL: http://www.pluck-cms.org/ Bug: Local File Include Exploits: YES Reported: 25.08.2008 Vendor Response: 30.08.2008 Solution: Y...

DSECRG-08-039.txt

Hello, bugtraq. Digital Security Research Group DSecRG Advisory DSECRG-08-039 Application: Pluck CMS Versions Affected: 4.5.3 Vendor URL: http://www.pluck-cms.org/ Bug: Local File Include Exploits: YES Reported: 25.08.2008 Vendor Response: 30.08.2008 Solution: YES Date of Public Advisory:...

[DSECRG-08-039] Local File Include Vulnerability in Pluck CMS 4.5.3

Hello, bugtraq. Digital Security Research Group DSecRG Advisory DSECRG-08-039 Application: Pluck CMS Versions Affected: 4.5.3 Vendor URL: http://www.pluck-cms.org/ Bug: Local File Include Exploits: YES Reported: 25.08.2008 Vendor Response: 30.08.2008 Solution: YES Date of Public Advisory:...

Pluck CMS 4.5.3 - 'g_pcltar_lib_dir' Local File Inclusion

Hello, bugtraq. Digital Security Research Group DSecRG Advisory DSECRG-08-039 Application: Pluck CMS Versions Affected: 4.5.3 Vendor URL: http://www.pluck-cms.org/ Bug: Local File Include Exploits: YES Reported: 25.08.2008 Vendor Response: 30.08.2008 Solution: YES Date of Public Advisory:...

Pluck CMS 4.5.3 (g_pcltar_lib_dir) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Pluck CMS 4.5.3 gpcltarlibdir Local File Inclusion Vulnerability ===================================================================== Hello, bugtraq. Digital Security...

Pluck CMS 4.5.3 - g_pcltar_lib_dir Local File Inclusion

Pluck CMS 4.5.3 - gpcltarlibdir Local File Inclusion Hello, bugtraq. Digital Security Research Group DSecRG Advisory DSECRG-08-039 Application: Pluck CMS Versions Affected: 4.5.3 Vendor URL: http://www.pluck-cms.org/ Bug: Local File Include Exploits: YES Reported: 25.08.2008 Vendor Response:...

Pluck CMS 4.5.3 - update.php Remote File Corruption

Pluck CMS 4.5.3 - update.php Remote File Corruption "; copy"data/title.dat", "data/settings/title.dat"; unlink"data/settings/install.dat"; copy"data/install.dat", "data/settings/install.dat"; copy"data/options.php", "data/settings/options.php"; copy"data/pass.php", "data/settings/pass.php";...

Pluck CMS 4.5.3 - 'update.php' Remote File Corruption

"; copy"data/title.dat", "data/settings/title.dat"; unlink"data/settings/install.dat"; copy"data/install.dat", "data/settings/install.dat"; copy"data/options.php", "data/settings/options.php"; copy"data/pass.php", "data/settings/pass.php"; unlink"data/settings/langpref.php";...

CVE-2008-3851

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the 1 blogpost, 2 cat, and 3 file parameters to data/inc/themes/predefinedvariables.php, as reachable through index.php; an...

Directory traversal

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the 1 blogpost, 2 cat, and 3 file parameters to data/inc/themes/predefinedvariables.php, as reachable through index.php; an...

CVE-2008-3851

CVE-2008-3851 affects Pluck CMS 4.5.2 on Windows, enabling local file inclusion via directory traversal in index.php through parameters to data/inc/themes/predefined_variables.php and data/inc/blog_include_react.php (and their blogpost/cat variants). Root cause involves improper input handling th...

CVE-2008-3851

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the 1 blogpost, 2 cat, and 3 file parameters to data/inc/themes/predefinedvariables.php, as reachable through index.php; an...

CVE-2008-3851: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the 1 blogpost, 2 cat, and 3 file parameters to data/inc/themes/predefinedvariables.php, as reachable through index.php; an...

DSECRG-08-037.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date of Public Advisory: 25.08.2008...

Pluck CMS 4.5.2 Multiple Local File Inclusion Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date...

[DSECRG-08-037] Multiple Local File Include Vulnerabilities in Pluck CMS 4.5.2

Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date of Public Advisory: 25.08.2008...

Pluck CMS 4.5.2 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Pluck CMS 4.5.2 Multiple Local File Inclusion Vulnerabilities ============================================================= Digital Security Research Group DSecRG Advisory...

Pluck CMS 4.5.2 - Multiple Local File Inclusions

Pluck CMS 4.5.2 - Multiple Local File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008...