38 matches found
CVE-2005-0513
The CVE-2005-0513 issue is a PHP remote file inclusion in the Email This Entry add-on for pMachine Pro 2.4 (and possibly other pMachine Free variants) via mail_autocheck.php. An attacker can set pm_path to a URL containing PHP code, enabling arbitrary code execution on the remote server. The rela...
[Full-Disclosure] pMachine Pro / pMachine Free Remote Code Execution
pMachine Pro / pMachine Free Remote Code Execution vendor website: http://www.pmachine.com I. BACKGROUND PMachine is one of the most flexible & creative on-line publishing tools available. With PMachine you can publish any kind of web content - from a basic weblog to an advanced, interactive...
CVE-2005-0513
PHP remote file inclusion vulnerability in mailautocheck.php in the Email This Entry add-on for pMachine Pro 2.4, and possibly other versions including pMachine Free, allows remote attackers to execute arbitrary PHP code by directly requesting mailautocheck.php and modifying the pmpath parameter ...
pMachine mail_autocheck.php Arbitrary Code Execution
It is possible to make the remote host include PHP files hosted on a third-party server using the pmachine CGI suite which is installed. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable...
PMachine Pro 2.4 - Remote File Inclusion
PMachine Pro 2.4 - Remote File Inclusion source: https://www.securityfocus.com/bid/12597/info PMachine Pro is reported prone to a remote file include vulnerability. This issue affects the 'mailautocheck.php' script. An attacker may leverage this issue to execute arbitrary server-side script code ...
PMachine Pro 2.4 - Remote File Inclusion
source: https://www.securityfocus.com/bid/12597/info PMachine Pro is reported prone to a remote file include vulnerability. This issue affects the 'mailautocheck.php' script. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileg...
pMachine <= 2.2.1 Multiple Vulnerabilities
The remote host is running a version of pMachine that is affected by two flaws : - It is vulnerable to multiple path disclosure problems that could allow an attacker to gain more knowledge about this host. - It is vulnerable to a cross-site-scripting attack that could allow an attacker to steal t...
pMachine 1.02.x - lib Multiple Script Direct Request Full Path Disclosures
pMachine 1.02.x - lib Multiple Script Direct Request Full Path Disclosures source: https://www.securityfocus.com/bid/7980/info It has been reported that pMachine is prone to remote a patch disclosure vulnerability when accessing various scripts. When a request is made for a target PHP script,...
pMachine 1.02.x - Search Module Cross-Site Scripting
pMachine 1.02.x - Search Module Cross-Site Scripting source: https://www.securityfocus.com/bid/7981/info Reportedly, pMachine is vulnerable to a cross-site scripting attack. The vulnerability is present in the search module. The issue presents itself likely due to insufficient sanitization...
pMachine 1.02.x - Multiple Script sfx Full Path Disclosures
pMachine 1.02.x - Multiple Script sfx Full Path Disclosures source: https://www.securityfocus.com/bid/7980/info It has been reported that pMachine is prone to remote a patch disclosure vulnerability when accessing various scripts. When a request is made for a target PHP script, possibly requiring...
pMachine 1.0/2.x - '/lib/' Multiple Script Direct Request Full Path Disclosures
source: https://www.securityfocus.com/bid/7980/info It has been reported that pMachine is prone to remote a patch disclosure vulnerability when accessing various scripts. When a request is made for a target PHP script, possibly requiring a blank URI parameter, pMachine is said to throw an...
pMachine 1.0/2.x - Search Module Cross-Site Scripting
source: https://www.securityfocus.com/bid/7981/info Reportedly, pMachine is vulnerable to a cross-site scripting attack. The vulnerability is present in the search module. The issue presents itself likely due to insufficient sanitization performed on user-supplied data that is passed as the query...
CVE-2003-1086
PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pmpath parameter to reference a URL on a remote web server that contains the code...
pMachine.txt
Informations : °°°°°°°°°°°°° Language : PHP Version : Free 2.2.1 Website : http://www.pmachine.com Problem : Include Security Hole PHP Code/Location : °°°°°°°°°°°°°°°°°°° This will work if registerglobals is ON OR OFF. /pm/lib.inc.php : ------------------------------------------------------------...
pMachine lib.inc.php pm_path Parameter Remote File Inclusion
It is possible to make the remote host include PHP files hosted on a third-party server using the pmachine CGI suite which is installed. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable...
PMachine 2.2.1 - Lib.Inc.php Remote File Inclusion Command Execution
PMachine 2.2.1 - Lib.Inc.php Remote File Inclusion Command Execution source: https://www.securityfocus.com/bid/7919/info It has been reported that PMachine does not properly handle include files under some circumstances. Because of this, an attacker may be able to remotely execute commands...
PMachine Lib.Inc.PHP Remote Include Command Execution Vulnerability
Description It has been reported that PMachine does not properly handle include files under some circumstances. Because of this, an attacker may be able to remotely execute commands. Technologies Affected PMachine PMachine 2.2.1 Recommendations Block external access at the network boundary, unles...
PMachine 2.2.1 - '/Lib.Inc.php' Remote File Inclusion / Command Execution
source: https://www.securityfocus.com/bid/7919/info It has been reported that PMachine does not properly handle include files under some circumstances. Because of this, an attacker may be able to remotely execute commands...