EUVD-2008-6306

Malware in sbrugna...

EUVD-2006-5877

Malware in sbrugna...

EUVD-2008-3756

Malware in sbrugna...

EUVD-2008-3197

Malware in sbrugna...

EUVD-2010-1945

Malware in sbrugna...

EUVD-2006-2607

Malware in sbrugna...

CVE-2006-4526

SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray parameter...

VulnCheck KEV: CVE-2002-0953

globals.php in PHP Address before 0.2f, with the PHP allowurlfopen and registerglobals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter...

SUSE CVE-2007-1583

The mbparsestr function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal registerglobals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with registerglobals functionality that is not...

SUSE CVE-2007-1701

PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when registerglobals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling sessiondecode on a string beginning with...

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. A flaw was found in handling of dynamic changes to global variables. A script which used certain functions which change global variables could be forced to enable the registerglobals configuration option, possibly resulting in global variable injecti...

CVE-2006-3174

Cross-site scripting XSS vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary HTML via the mailbox parameter...

OpenEMR 4.2.0 Authentication Bypass Vulnerability

OpenEMR versions 4.2.0 and 4.2.0 patch 1 suffer from an authentication bypass vulnerability. Title: Authentication bypass in OpenEMR CVE Reference: CVE-2015-4453 Product: OpenEMR Vendor: http://www.open-emr.org/ Tested versions: 4.2.0 and 4.2.0 patch 1 Affected versions: 2.8.3 to 4.2.0 patch 1...

WordPress cache_lastpostdate Arbitrary Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress cachelastpostdate Arbitrary Code Execution', 'Description' = %q This module exploits an arbitrary PHP code execution flaw ...

MyBB unset_globals()function is bypassed leading to remote code execution analysis-vulnerability warning-the black bar safety net

Yesterday in the exploit-db see Ryat cow made a MyBB remote code execution vulnerability, the analysis is very detailed, unfortunately it is written in English, where the simple translation. When registerglobals=On, MyBB will call unsetglobalsfunction to achieve registerglobals=Off. | 1 2 3 4 5 6...

MyBB 1.8.2 - 'unset_globals()' Function Bypass / Remote Code Execution

Exploit Title: MyBB - 2014.03.06 MyBB's unsetglobals function can be bypassed under special conditions and it is possible to allows remote code execution. I. MyBB's unsetglobals Function Bypass When PHP's register\globals configuration set on, MyBB will call unset\globals function, all global...

客客系统存在安全漏洞，导致用户可以随便改变余额（刷钱）

简要描述： 【客客系统】 贵系统模拟了registerglobals导致用户可以传递任何变量的值给你 如果传递了敏感的参数，比如余额balance字段的值，你又保存了。 就会发生漏洞。 详细说明： 改变余额的，只需改变space表balance字段的值。 而账户设置正好设置space字段信息 通过post传递balance的值给你，就能修改用户余额。 如：post ：formhash=f955cc&confbalance=99999 用户余额就改为99999了！ 漏洞证明：...

WebSPELL <= 4.01.02 (picture.php) File Disclosure Vulnerability

No description provided by source. WebSPELL = 4.01.02 picture.php Remote File Disclosure Vulnerability Discovered by: Trex Visit: www.Trex-Online.net / www.UnderGround.ag Comment: Happy easter! / \ / \ / / / \ \ / \ /\ // / GIVE ME A CARROT OR I WILL \ \O O/ \ BLOW UP YOUR HOUSE / / ^ \ / / /...

AdaptCMS 2.0.0 Beta (init.php) Remote File Inclusion Vulnerability

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

OvBB 0.16a - Multiple Local File Inclusion Vulnerabilities

No description provided by source. OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by cOndemned Tested on Linux Debian apache + php5 + mysql download at http://sourceforge.net/projects/ovbb/ source of /skins/default/addevent.tpl.php 1. ?php 2. // Header. 3. $strPageTitle = ::...