XOOPS mydirname参数多个PHP代码注入漏洞

BUGTRAQ ID: 33176 Xoops是非常流行的动态web内容管理系统，用面向对象的PHP编写。...

CVE-2008-5878

CVE-2008-5878 affects Phpclanwebsite (also known as PCW) up to version 1.23.3 Fix Pack 5. The issue arises when magic_quotes_gpc is disabled and register_globals is enabled, allowing remote attackers to include and execute arbitrary files via a directory traversal in the following parameters: (1)...

Constructr CMS 3.02.5 SQL Injection / Traversal

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

Directory traversal

Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the system parameter in modules/netshop/post.php; and the...

freeSSHd SFTP命令远程缓冲区溢出漏洞

BUGTRAQ ID: 32972 freeSSHd是一款免费的SSH服务程序。 freeSSHd SFTP命令存在多个缓冲区溢出，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，也可以以运行此程序的用户进程权限执行任意代码。 freeSSHd 1.2.1 目前没有解决方案提供： http://freesshd.com/ FreeSSHd Multiple Remote Stack Overflow Vulnerabilities. Version : 1.2.1 Advisory: http://www.bmgsec.com.au/advisory/42/ Discovered &...

CMS NetCat 3.12 - Multiple Vulnerabilities

CMS NetCat 3.12 - Multiple Vulnerabilities NetCat &control= etc. 4. HTTP Response Sp...

PHPLD 3.3 - Blind SQL Injection

phpLD 3.3 Blind SQL Injection http://www.phplinkdirectory.com/ magicquotesgpc = Off registerglobals = On Vulnerable: GET http://site/phpld/page.php?name= True Request: validpagename' or 1=1 False Request: validpagename' or 1=0 Try this urlencode: validpagename' or ORDMIDSELECT PASSWORD FROM PLDUS...

PHPLD 3.3 - Blind SQL Injection

PHPLD 3.3 - Blind SQL Injection phpLD 3.3 Blind SQL Injection http://www.phplinkdirectory.com/ magicquotesgpc = Off registerglobals = On Vulnerable: GET http://site/phpld/page.php?name= True Request: validpagename' or 1=1 False Request: validpagename' or 1=0 Try this urlencode: validpagename' or...

E-Learning Portal File Upload

E-Learning Portal Remote File Upload ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com D-Unit: ZoRLu & SuB-ZeRo N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

GLSA-200812-20 : phpCollab: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-20 phpCollab: Multiple vulnerabilities Multiple vulnerabilities have been found in phpCollab: rgod reported that data sent to general/sendpassword.php via the loginForm parameter is not properly sanitized before being used ...

Injader CMS 2.1.1 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Injader CMS 2.1.1 id Remote SQL Injection Vulnerability ========================================================= Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL -...

CVE-2008-5587

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when registerglobals is enabled, allows remote attackers to read arbitrary files via a .. dot dot in the language parameter to index.php...

DEBIAN-CVE-2008-5587

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when registerglobals is enabled, allows remote attackers to read arbitrary files via a .. dot dot in the language parameter to index.php...

CVE-2008-5587

Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when registerglobals is enabled, allows remote attackers to read arbitrary files via a .. dot dot in the language parameter to index.php...

Amaya Web Browser Buffer Overflow

Amaya Web Browser html tag overflow quite a few tags are vulnerable gdb i r eax 0x41414141 1094795585 ecx 0x0 0 edx 0xbfc0ff80 -1077870720 ebx 0x9ec1220 166466080 esp 0xbfc10064 0xbfc10064 ebp 0xbfc10268 0xbfc10268 esi 0xa2f64a0 170878112 edi 0xbfc10160 -1077870240 eip 0x8144b40 0x8144b40 eflags...

Availscript Classmate File Upload

Availscript Classmate Script Remote File Upload Vulnerability ---------------------------------------------------------- Discovered By: S.W.A.T. [email protected] Home: www.batlagh.com Script Page: http://www.availscript.com/classmatescript.php...

Moodle 1.9.3 Remote Code Execution Vulnerability

No description provided by source. Moodle 1.9.3 Remote Code Execution Name Remote Code Execution in Moodle Systems Affected Moodle 1.9.3 and possibly earlier versions Severity High Impact CVSSv2 High 7.3/10, vector: AV:N/AC:L/Au:M/C:P/I:P/A:C Vendor http://moodle.org/ Advisory...

Living Local 1.1 (XSS-RFU) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Living Local 1.1 XSS-RFU Multiple Remote Vulnerabilities ========================================================== Authot: Bgh7 Home: http://ozelteam.com - Turk Bilisim Gucleri...

living Local 1.1 - Cross-Site Scripting / Arbitrary File Upload

Authot: Bgh7 Home: http://ozelteam.com - Turk Bilisim Gücleri Pst: [email protected] ============================= Dork: allinurl:clientsignup.php "classifieds" Dork2: Powered By: Living Local V1.1 Demo: http://www.jerseyads.net/listtest.php?r="alert Demo2:...

PunBB Mod PunPortal 0.1 - Local File Inclusion

PunBB Mod PunPortal 0.1 - Local File Inclusion !/usr/bin/perl =about PunBB PunPortal 0.1 Local File Inclusion Exploit -------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/download.php?id=1108 download cms http://punbb.org register...