CVE-2009-2183

Campsite 3.3.0 RC1 is affected by a Directory Traversal (CVE-2009-2183) in admin-files/ad.php, due to a crafted value in GLOBALS[g_campsiteDir] that allows remote attackers to read and possibly execute arbitrary local files via a .. sequence. The issue is a Local/Remote File Inclusion vulnerabili...

Campsite 3.3.0 RC1 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. ┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes a...

Campsite 3.3.0 RC1 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= Campsite 3.3.0 RC1 Multiple Remote File Inclusion Vulnerabilities =================================================================...

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions ???????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ????...

Directory traversal

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to index.php...

CVE-2009-1487

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the loginuser aka username parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1489

includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter...

Sql injection

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the loginuser aka username parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1488

Directory traversal vulnerability in admin/load.php in FunGamez RC1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to index.php...

Authentication flaw

includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter...

CVE-2009-1489

The CVE-2009-1489 issue affects Fungamez RC1, where includes/user.php permits remote attackers to bypass authentication by manipulating the user cookie parameter, potentially gaining administrative access. The NVD entry shows a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no us...

CVE-2009-1487

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the loginuser aka username parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1489

includes/user.php in Fungamez RC1 allows remote attackers to bypass authentication and gain administrative access by setting the user cookie parameter...

CVE-2009-1488

CVE-2009-1488 describes a directory traversal vulnerability in FunGamez RC1 where admin/load.php is vulnerable to path traversal via .. in the module parameter to index.php. The root cause is improper handling of the module parameter that allows including and executing arbitrary local files, enab...

CVE-2009-1487

CVE-2009-1487 describes an SQL injection vulnerability in FunGamez RC1, specifically in pages/login.php where the login_user parameter (username) allows remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation on the login_user field. Impact stated: arbitrary ...

CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

FunGamez rc1 (AB/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== FunGamez rc1 AB/LFI Multiple Remote Vulnerabilities =====================================================...

CVE-2008-6188

CVE-2008-6188 affects GForge 4.6 rc1 and earlier. The SQL injection exists in people/editprofile.php via the skill_edit[] parameter, enabling remote attackers to inject arbitrary SQL. Connected sources confirm the affected software and input vector; no vendor patch is provided in the documents, s...

phpBLASTER 1.0 RC1 (blaster_user) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= phpBLASTER 1.0 RC1 blasteruser Blind SQL Injection Exploit =============================================================...

phpBLASTER 1.0 RC1 - Blind SQL Injection

--+++============================================================+++-- --+++====== phpBLASTER 1.0 RC1 Blind SQL Injection Exploit ======+++-- --+++============================================================+++-- 4 return true; else return false; function run $hostname, $path, $username $key =...