423 matches found
PHP-Fusion Remote Command Execution
Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script: http://www.phpfusion-ar.com/downloads.php?catid=1&downloadid=91...
PHP-Fusion - Remote Command Execution
PHP-Fusion - Remote Command Execution Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script:...
CoreHTTP CGI支持远程命令执行漏洞
BUGTRAQ ID: 37454 CoreHTTP是一款小型的Web服务器。 CoreHTTP服务器的http.c文件没有正确的过滤用户输入便调用了popen，这允许攻击者使用标准的Web浏览器执行任意命令： / escape the url for " and \ since we use it in popen / for i = 0; i PATHSIZE; i++ if urli == '\0' break; else if urli == '\' || urli == '"' || urli == ''' find = url + i; strcpytemp, find;...
CoreHTTP 0.5.3.1 - CGI Arbitrary Command Execution
CoreHTTP 0.5.3.1 - CGI Arbitrary Command Execution Package name: CoreHTTP server Version: 0.5.3.1 and below as long as cgi support is enabled Software URL: http://corehttp.sourceforge.net/ Exploit: http://aconole.brad-x.com/programs/corehttpcgienabled.rb Issue: CoreHTTP server fails to properly...
CoreHTTP Arbitrary Command Execution Vulnerability
Exploit for unknown platform in category remote exploits ================================================== CoreHTTP Arbitrary Command Execution Vulnerability ================================================== Title: CoreHTTP Arbitrary Command Execution Vulnerability CVE-ID: OSVDB-ID: Author: Aar...
PHP 5.3.x < 5.3.1 Multiple Vulnerabilities
Binary data 801090.prm...
PHP 5.3.x < 5.3.1 Multiple Vulnerabilities
Binary data 5242.prm...
ClamAV Milter Blackhole-Mode Remote Code Execution
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'ClamAV Milte...
Sun VirtualBox <= 3.0.6 privilege escalation
Exploit for unknown platform in category local exploits ============================================ Sun VirtualBox runme.c include include include include include int mainint argc, char argv FILE from, to; int fd; char ch; setuid0; setgid0; from...
Sun VirtualBox 3.0.6 Local Root
!/bin/sh CVE-2009-3692 Sun VirtualBox runme.c include include include include include int mainint argc, char argv FILE from, to; int fd; char ch; setuid0; setgid0; from = fopen"/bin/sh","rb"; to = fopen"./sh","wb"; while!feoffrom ch = fgetcfrom; if!feoffrom fputcch, to; fclosefrom; fcloseto; fd =...
Sun VirtualBox <= 3.0.6 privilege escalation
No description provided by source. !/bin/sh CVE-2009-3692 Sun VirtualBox = 3.0.6 local root exploit ======================================================== Exploits popen meta char shell injection vulnerability in Sun VirtualBox. E.g. admin@sundevil:/test$ id uid=101admin gid=10staff...
Sun VirtualBox 3.0.6 - Local Privilege Escalation
Sun VirtualBox 3.0.6 - Local Privilege Escalation !/bin/sh CVE-2009-3692 Sun VirtualBox runme.c include include include include include int mainint argc, char argv FILE from, to; int fd; char ch; setuid0; setgid0; from = fopen"/bin/sh","rb"; to = fopen"./sh","wb"; while!feoffrom ch = fgetcfrom;...
Sun VirtualBox 3.0.6 - Local Privilege Escalation
!/bin/sh CVE-2009-3692 Sun VirtualBox runme.c include include include include include int mainint argc, char argv FILE from, to; int fd; char ch; setuid0; setgid0; from = fopen"/bin/sh","rb"; to = fopen"./sh","wb"; while!feoffrom ch = fgetcfrom; if!feoffrom fputcch, to; fclosefrom; fcloseto; fd =...
Cross site scripting
The popen API function in TSRM/tsrmwin32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service crash via a crafted 1 "e" or 2 "er" string in the second argument aka mode, possibly related t...
CVE-2009-3294
The popen API function in TSRM/tsrmwin32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service crash via a crafted 1 "e" or 2 "er" string in the second argument aka mode, possibly related t...
CVE-2009-3294
The popen API function in TSRM/tsrmwin32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service crash via a crafted 1 "e" or 2 "er" string in the second argument aka mode, possibly related t...
CVE-2009-3294
CVE-2009-3294 affects PHP prior to 5.2.11 and 5.3.x prior to 5.3.1. The vulnerability is in the popen API (TSRM/tsrm_win32.c) on certain Windows OSes, where a crafted second argument (mode) of either "e" or "er" can cause a denial of service (crash) and may involve the Microsoft C runtime’s _fdop...
CVE-2009-3294
The popen API function in TSRM/tsrmwin32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service crash via a crafted 1 "e" or 2 "er" string in the second argument aka mode, possibly related t...
CVE-2009-3294
The popen API function in TSRM/tsrmwin32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service crash via a crafted 1 "e" or 2 "er" string in the second argument aka mode, possibly related t...
CVE-2009-3294: Use of Externally-Controlled Format String
The popen API function in TSRM/tsrmwin32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service crash via a crafted 1 "e" or 2 "er" string in the second argument aka mode, possibly related t...