PWP Wiki Processor 1-5-1 - Arbitrary File Upload

====remote shell upload==== ================================ script: PWP Wiki Processor 1-5-1 =========================================================================== download from:http://www.lars-ackermann.de/wiki/static/upload/PWP1-5-1en-US.zip...

PWP Wiki Processor 1-5-1 - Arbitrary File Upload

PWP Wiki Processor 1-5-1 - Arbitrary File Upload ====remote shell upload==== ================================ script: PWP Wiki Processor 1-5-1 =========================================================================== download from:http://www.lars-ackermann.de/wiki/static/upload/PWP1-5-1en-US.zi...

PWP Wiki Processor 1-5-1 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================= PWP Wiki Processor 1-5-1 Remote File Upload Vulnerability ========================================================= ====remote shell upload==== ================================...

PWP Wiki Processor 1-5-1 File Upload

====remote shell upload==== ================================ script: PWP Wiki Processor 1-5-1 =========================================================================== download from:http://www.lars-ackermann.de/wiki/static/upload/PWP1-5-1en-US.zip...

CVE-2007-1957

Multiple PHP remote file inclusion vulnerabilities in Guernion Sylvain Portail Web Php aka Gsylvain35 Portail Web, PwP allow remote attackers to execute arbitrary PHP code via a URL in the pageAll parameter to index.php in 1 template/Vert/, or 2 template/Noir/...

CVE-2007-1957

Guernion Sylvain Portail Web Php (PwP) is affected by CVE-2007-1957 with PHP remote file inclusion vulnerabilities in the index.php handling pageAll, affecting templates under template/Vert/ and template/Noir/. Successful exploits could allow an attacker to execute arbitrary PHP code on the serve...

CVE-2007-1957

Multiple PHP remote file inclusion vulnerabilities in Guernion Sylvain Portail Web Php aka Gsylvain35 Portail Web, PwP allow remote attackers to execute arbitrary PHP code via a URL in the pageAll parameter to index.php in 1 template/Vert/, or 2 template/Noir/...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php aka Gsylvain35 Portail Web, PwP before 2.5.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

CVE-2007-0700

CVE-2007-0700 affects Guernion Sylvain Portail Web Php (PwP) where a directory traversal vulnerability in index.php allows remote attackers to read arbitrary files via a ".." sequence in the page parameter. The NVD entry notes a later report for version 2.5.1.1; CVSS v2 base score is 5.0 (MEDIUM)...

CVE-2006-6768

Multiple cross-site scripting XSS vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the 1 cat or 2 main parameter...

CVE-2006-6768

The CVE-2006-6768 entry documents multiple XSS vulnerabilities in the default.asp page of PWP Technologies The Classified Ad System, exploitable via the (1) cat and (2) main parameters. The underlying issue is cross-site scripting in input handling on that page, with a CVSS base score of 6.8 (Med...

CVE-2006-6349

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...

CVE-2006-6349

CVE-2006-6349 covers multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System. An attacker can remotely execute arbitrary SQL via (1) the main parameter in a view action (includes/mainpage/view.asp) in default.asp or (2) a query in the search engine. The NVD entry cites...

CVE-2006-6349

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via 1 the main parameter in a view action includes/mainpage/view.asp in default.asp or 2 a query in the search engine...