EUVD-2006-4930

Malware in sbrugna...

EUVD-2006-5545

Malware in sbrugna...

ProgSys <= 0.156 (RR.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+...

ProgSys RR.PHP远程文件包含漏洞

ProgSys是一款基于PHP的web管理程序。 ProgSys不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于’RR.PHP'脚本对用户提交的‘phpdnsbasedir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Bosch IT-Consulting ProgSys 0.151 目前没有解决方案提供，请关注以下链接： http://www.boesch-it.de/sw/progsys.php?lang=en !/usr/bin/perl use LWP::UserAgent;...

CVE-2006-5560

Cross-site scripting XSS vulnerability in heading.php in Boesch ProgSys 0.151 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/index.php, and unspecified vectors related to certain other files. NOTE: some of these details are obtained from third...

CVE-2006-5560

CVE-2006-5560 is a cross-site scripting vulnerability in Boesch ProgSys 0.151 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to admin/index.php and related files. CVSS v2.0 base score 4.3 (Medium): Network access, no authentication, partial inte...

CVE-2006-5560

Cross-site scripting XSS vulnerability in heading.php in Boesch ProgSys 0.151 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/index.php, and unspecified vectors related to certain other files. NOTE: some of these details are obtained from third...

ProgSys-0.151.txt

25/10/06 Vigilon Advisory http://www.vigilon.com/advisories/vg-progsys-24-10-2006.txt ------------------------------------------------------- Application: ProgSys Web Site: http://www.boesch-it.de/sw/php-scripts/progsys/english/download.php Versions: 0.151 and below Platform: linux, windows,...

ProgSys verion 0.151 XSS vulnerability

25/10/06 Vigilon Advisory http://www.vigilon.com/advisories/vg-progsys-24-10-2006.txt ------------------------------------------------------- Application: ProgSys Web Site: http://www.boesch-it.de/sw/php-scripts/progsys/english/download.php Versions: 0.151 and below Platform: linux, windows,...

CVE-2006-4944

PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...

CVE-2006-4944

PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdnsbasedir parameter...

CVE-2006-4944

CVE-2006-4944 is a PHP remote file inclusion vulnerability in ProgSys 0.151 and earlier. The flaw exists in includes/pear/Net/DNS/RR.php where an attacker can cause PHP code execution by supplying a crafted URL in the phpdns_basedir parameter. Public references indicate this can enable arbitrary ...

ProgSys 0.156 - RR.php Remote File Inclusion

ProgSys 0.156 - RR.php Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...

ProgSys 0.156 - &#039;RR.php&#039; Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++...

ProgSys <= 0.156 (RR.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ===================================================== ProgSys = 0.156 RR.php Remote File Include Exploit ===================================================== !/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: :::...