Kasseler CMS (FD/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Kasseler CMS FD/XSS Multiple Remote Vulnerabilities ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

pppBlog 0.3.11 - File Disclosure

pppBlog 0.3.11 - File Disclosure pppBlog = 0.3.11 randompic.php System File Disclosure Vulnerability url: http://sourceforge.net/projects/pppblog/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational...

GE Fanuc Real Time Information Portal 2.6 writeFile() API Exploit (meta)

Exploit for unknown platform in category remote exploits ======================================================================== GE Fanuc Real Time Information Portal 2.6 writeFile API Exploit meta ======================================================================== $Id: hookedonfanucs.rb Th...

PHP 5.2.4 ionCube - ioncube_read_file Safe Mode disable_functions Bypass

PHP 5.2.4 ionCube - ioncubereadfile Safe Mode disablefunctions Bypass ionCube output:"; echo $MyBootioncube; ? milw0rm.com 2007-10-11...

SiteDepth CMS 3.44 (ShowImage.php name) File Disclosure Vulnerability

No description provided by source. Sitedepth CMS 3.44 Local File Include LFI Exploit ! Application homepage : http://www.sitedepth.com/ ! Author : H4 / Team XPK ! Contact : [email protected] ! Bug discovered : 2006-11-07 ! Bug published : 2007-06-25...

SiteDepth CMS 3.44 (ShowImage.php name) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== SiteDepth CMS 3.44 ShowImage.php name File Disclosure Vulnerability ===================================================================== Sitedepth CMS 3.44 Local File...

SiteDepth CMS 3.44 - 'ShowImage.php?name' File Disclosure

Sitedepth CMS 3.44 Local File Include LFI Exploit ! Application homepage : http://www.sitedepth.com/ ! Author : H4 / Team XPK ! Contact : [email protected] ! Bug discovered : 2006-11-07 ! Bug published : 2007-06-25 --------------------------------------------------------------------- Vuln. code:...

CVE-2007-3007

PHP 5 before 5.2.3 does not enforce the openbasedir or safemode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function...

CVE-2007-3007

PHP 5 before 5.2.3 does not enforce the openbasedir or safemode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function...

CVE-2007-3007

PHP 5 before 5.2.3 does not enforce the openbasedir or safemode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function...

PT-2007-4304 · Php · Php

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.2.3 Description: The issue allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. This might also involve the realpath function...

Beryo 2.0(downloadpic.php chemin)Remote File Disclosure Vulnerability

Beryo 2.0downloadpic.php cheminRemote File Disclosure Vulnerability D.Script: http://www.xrousse.org/shared/beryo-2.0.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group V.Code: readfile"$chemin";...

Beryo 2.0 - downloadpic.php?chemin Remote File Disclosure

Beryo 2.0 - downloadpic.php?chemin Remote File Disclosure Beryo 2.0downloadpic.php cheminRemote File Disclosure Vulnerability D.Script: http://www.xrousse.org/shared/beryo-2.0.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay...

Beryo 2.0 - 'downloadpic.php?chemin' Remote File Disclosure

Beryo 2.0downloadpic.php cheminRemote File Disclosure Vulnerability D.Script: http://www.xrousse.org/shared/beryo-2.0.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group V.Code: readfile"$chemin";...

readfile() Safe Mode Bypass PHP 5.2.1/ 5.1.6 / 4.4.4

SecurityRisk : DEN Remote Exploit : No Local Exploit : Yes Exploit Given : Yes Credit : The-WolF-kSA Date : 24.3.2007 Affected Software : PHP 5.2.1/ 5.1.6 / 4.4.4 readfile Safe Mode Bypass PHP 5.2.1/ 5.1.6 / 4.4.4 Author: ThE-WoLf-KsA Date: - -Written: 24.3.2007 - --- 0.Description --- - --- 1...

Design/Logic Flaw

The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safemode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence...

CVE-2007-1710

The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safemode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence...

CVE-2007-1710

The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safemode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence...

CVE-2007-1710

The CVE-2007-1710 issue affects PHP’s readfile function in versions 4.4.4, 5.1.6, and 5.2.1, where an attacker can bypass safe_mode and read arbitrary local files by using a php://… URL syntax (e.g., php://../../…). This is a local-privilege-context vulnerability enabling partial disclosure of in...

CVE-2007-1710

The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safemode restrictions and read arbitrary files by referring to local files with a certain URL syntax instead of a pathname syntax, as demonstrated by a filename preceded a "php://../../" sequence...