Lucene search
+L

4592 matches found

Prion
Prion
•added 2010/03/05 6:30 p.m.•26 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSRootPath parameter to 1 Framework/EmailTemplates.class.php, 2 Customers/PDPEmailReplaceConstants.class.php, and 3...

7.5CVSS8.2AI score0.02086EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2010/03/05 6:00 p.m.•36 views

CVE-2009-4666

Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSRootPath parameter to 1 Framework/EmailTemplates.class.php, 2 Customers/PDPEmailReplaceConstants.class.php, and 3...

7.7AI score0.02086EPSS
SaveExploits1References1
CVE
CVE
•added 2010/03/05 6:00 p.m.•54 views

CVE-2009-4666

Webradev Download Protect 1.0 contains multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL via the GLOBALS[RootPath] parameter targeting files in includes/DProtect/, specifically Framework/EmailTemplates....

7.5CVSS7.9AI score0.02086EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/05 12:00 a.m.•6 views

CVE-2010-0935: Undefined Security Weakness

Perforce Server 2009.2 and earlier, when the protection table is empty, allows remote authenticated users to obtain super privileges via a "p4 protect" command...

4.6CVSS5.9AI score0.01573EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/03/05 12:00 a.m.•6 views

CVE-2009-4666: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Webradev Download Protect 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSRootPath parameter to 1 Framework/EmailTemplates.class.php, 2 Customers/PDPEmailReplaceConstants.class.php, and 3...

7.5CVSS6.4AI score0.02086EPSS
SaveExploits1References2
zdt
zdt
•added 2010/02/12 12:00 a.m.•25 views

Nikiara Fraud Management System XSS Vulnerability

Exploit for unknown platform in category web applications ================================================= Nikiara Fraud Management System XSS Vulnerability ================================================= -------------------------------------------------------------------- Exploit Title: Nikia...

7.1AI score
SaveExploits0
Prion
Prion
•added 2009/11/09 5:30 p.m.•24 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow remote attackers to hijack the authentication of administrators for requests that 1 delete the editing protection of a user or 2 delete a certa...

6.8CVSS7.8AI score0.0072EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2009/11/09 5:30 p.m.•26 views

CVE-2009-3922

Multiple cross-site request forgery CSRF vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow remote attackers to hijack the authentication of administrators for requests that 1 delete the editing protection of a user or 2 delete a certa...

6.8CVSS7.2AI score0.0072EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2009/11/09 5:00 p.m.•35 views

CVE-2009-3922

Multiple cross-site request forgery CSRF vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow remote attackers to hijack the authentication of administrators for requests that 1 delete the editing protection of a user or 2 delete a certa...

7.2AI score0.0072EPSS
SaveExploits0References7
CVE
CVE
•added 2009/11/09 5:00 p.m.•52 views

CVE-2009-3922

The CVE concerns Drupal’s User Protect module. Affected versions are 5.x prior to 5.x-1.4 and 6.x prior to 6.x-1.3. The issue is cross-site request forgery (CSRF) that enables remote attackers to hijack administrator authentication for two actions: (1) removing a user’s editing protection, and (2...

6.8CVSS7.2AI score0.0072EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/09 12:00 a.m.•5 views

CVE-2009-3922: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow remote attackers to hijack the authentication of administrators for requests that 1 delete the editing protection of a user or 2 delete a certa...

6.8CVSS5.9AI score0.0072EPSS
SaveExploits0References2
Drupal
Drupal
•added 2009/11/04 12:00 a.m.•17 views

SA-CONTRIB-2009-090 - User Protect - Cross Site Request Forgery

User Protect provides various editing protection for users. The protections can be specific to a user, or applied to all users in a role. User administrators can be individually configured to be allowed to bypass the protections. The Drupal Forms API protects against cross site request forgeries...

6.8AI score
SaveExploits0References7
myhack58
myhack58
•added 2009/10/25 12:00 a.m.•21 views

To modify log file properties protect yourself will not be the administrator found-vulnerability warning-the black bar safety net

The log file location is actually stored in the registry,as long as we modify its attributes to mask their intrusion traces, Here only modify the default location,the log size of the property,such as log size 0 0 0 0 0 0 0 1,so that it can not be normal recording, So if you can perfect guarantee...

1.2AI score
SaveExploits0
myhack58
myhack58
•added 2009/10/15 12:00 a.m.•39 views

To modify log file properties protect yourself will not be the administrator found that(idea)-bug warning-the black bar safety net

by ha0k The log file location is actually stored in the registry, as long as we modify its attributes to mask their intrusion traces, here just modify the default location, the log size of the property, such as log size 0 0 0 0 0 0 0 1,so that it can not be normal recording, so it can be perfect ...

1AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
•added 2009/07/05 12:00 a.m.•7 views

Update Protection against Recent Malware Threats (5-Jul-09)

The update includes new protections against 11 recent malware threats: Trickler: Trojan.Swizzor-D - Trojan.Swizzor-D is a downloader Trojan that downloads malicious files form remote hosts onto the infected machines. It also communicates with remote servers and transfers unwanted advertisement...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/05/27 12:00 a.m.•25 views

Webradev Download Protect 1.0 Remote File Inclusion

Webradev Download Protect v1.0 Remote File Inclusion ======================================================== Author : asL-Sabia = = Home : www.v4-Team.com = = email: [email protected] = = = scripts :...

0.2AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/05/27 12:00 a.m.•17 views

Webradev Download Protect 1.0 Remote File Inclusion Vulnerabilities

No description provided by source. Webradev Download Protect v1.0 Remote File Inclusion ======================================================== Author : asL-Sabia = = Home : www.v4-Team.com = = email: [email protected] = = = scripts :...

7.1AI score
SaveExploits0
zdt
zdt
•added 2009/05/26 12:00 a.m.•33 views

Webradev Download Protect 1.0 Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Webradev Download Protect 1.0 Remote File Inclusion Vulnerabilities =================================================================== scripts :...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/05/26 12:00 a.m.•15 views

Webradev Download Protect 1.0 - Remote File Inclusion

Webradev Download Protect 1.0 - Remote File Inclusion Webradev Download Protect v1.0 Remote File Inclusion ======================================================== Author : asL-Sabia = = Home : www.v4-Team.com = = email: [email protected] = = = scripts :...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/05/26 12:00 a.m.•45 views

Webradev Download Protect 1.0 - Remote File Inclusion

Webradev Download Protect v1.0 Remote File Inclusion ======================================================== Author : asL-Sabia = = Home : www.v4-Team.com = = email: [email protected] = = = scripts :...

7.5CVSS5.8AI score0.02086EPSS
SaveExploits1
Rows per page
Query Builder