840 matches found
CVE-2007-0848
PHP remote file inclusion vulnerability in classes/classmail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter...
CVE-2007-0848
PHP remote file inclusion vulnerability in classes/classmail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtofolder parameter...
CVE-2007-0848
The CVE-2007-0848 entry concerns Maian Recipe 1.0 and a PHP remote file inclusion in the file classes/class_mail.inc.php. The underlying issue allows an attacker to supply a URL via the path_to_folder parameter to cause remote PHP code execution. Exploitation details are not provided in the avail...
Maian Recipe 1.0 (path_to_folder) Remote File Include Vulnerability
No description provided by source. Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI:...
maian-rfi.txt
Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI: http://www.SITE.com/path/classes/classmail.inc.php?pathtofolder=shell...
Maian Recipe 1.0 (path_to_folder) Remote File Include Vulnerability
Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI: http://www.SITE.com/path/classes/classmail.inc.php?pathtofolder=shell...
Maian Recipe 1.0 (path_to_folder) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== Maian Recipe 1.0 pathtofolder Remote File Include Vulnerability =================================================================== Found by Denven Google Dork: "Powered b...
Maian Recipe 1.0 - path_to_folder Remote File Inclusion
Maian Recipe 1.0 - pathtofolder Remote File Inclusion Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI:...
Maian Recipe 1.0 - 'path_to_folder' Remote File Inclusion
Found by Denven Script: http://www.maianscriptworld.co.uk/freestuff1975recipe.html Google Dork: "Powered by Maian Recipe v1.0" ERROR: classes/classmail.inc.php : include$pathtofolder.'classes/class.phpmailer.php'; RFI: http://www.SITE.com/path/classes/classmail.inc.php?pathtofolder=shell...
Design/Logic Flaw
rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536...
CVE-2007-0557
rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536...
CVE-2007-0557
rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privileges via a crafted recipe file, a different vulnerability than CVE-2007-0536...
CVE-2006-4120
Cross-site scripting XSS vulnerability in the Recipe module recipe.module before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-4120
Cross-site scripting XSS vulnerability in the Recipe module recipe.module before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-4120
The CVE-2006-4120 entry documents a cross-site scripting (XSS) vulnerability in Drupal’s Recipe module (recipe.module) prior to version 1.54, affecting Drupal 4.6 and earlier. The underlying issue is an XSS flaw in the Recipe module that allows remote attackers to inject arbitrary web scripts or ...
Revision to DRUPAL-SA-2006-013 - Recipe
It is possible for a malicious user to insert and execute XSS Cross Site Scripting, due to lack of validation on output from the contributed Recipe module. This may lead to administrator access if certain conditions are met. Learn more about XSS on Wikipedia. This is a revision to...
DRUPAL-SA-2006-013: Recipe module
It is possible for a malicious user to insert and execute XSS, due to lack of validation on output. Versions affected Please check the CVS $Id$ field in the file recipe.module to determine whether the version you are running is vulnerable. Versions older than the following are vulnerable: // $Id:...
CVE-2004-2568
Multiple cross-site scripting XSS vulnerabilities in ReciPants 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 user id, 2 recipe id, 3 category id, and 4 other ID number fields...