1169 matches found
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...
Pixie CMS 1.0 - Multiple Local File Inclusions
Digital Security Research Group DSecRG Advisory DSECRG-09-005 Application: Pixie CMS Versions Affected: 1.0 Vendor URL: http://www.getpixie.co.uk/ Bug: Multiple Local File Include Exploits: YES Reported: 29.08.2008 Vendor Response: 30.08.2008 Solution: NONE Date of Public Advisory: 27.01.2009...
OpenGoo 1.1 (script_class) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================= OpenGoo 1.1 scriptclass Local File Inclusion Vulnerability ============================================================= OpenGoo 1.1 Local File Inclusion http://www.opengoo.org/...
OpenGoo 1.1 (script_class) Local File Inclusion Vulnerability
No description provided by source. OpenGoo 1.1 Local File Inclusion http://www.opengoo.org/ magicquotesgpc = Off registerglobals = On http://site/opengoo/public/upgrade/index.php POST: formdatascriptclass=/../../../../../../../../../../../etc/passwd%00.html Author Notified: Jan. 18...
phpList <= 2.10.8 Variable Overwriting
The version of phpList installed on the remote host emulates PHP's 'registerglobals' functionaltiy' insecurely in its 'admin/index.php' script. Provided PHP's 'registerglobals' setting is disabled, an unauthenticated attacker can exploit this issue to overwrite the 'SERVERConfigFile' and...
XOOPS Multiple Scripts mydirname Parameter Arbitrary Command Injection
The version of XOOPS installed on the remote host fails to filter user-supplied input to the 'mydirname' parameter of the 'onupdate.php', 'notification.php', and 'oninstall.php' scripts under the application's 'xoopslib/modules/protector' directory before passing it to PHP 'eval' functions...
CVE-2008-5878
Multiple directory traversal vulnerabilities in Phpclanwebsite aka PCW 1.23.3 Fix Pack 5 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to include and execute arbitrary files via a .. dot dot in the 1 boxname parameter to...
CVE-2008-5878
Multiple directory traversal vulnerabilities in Phpclanwebsite aka PCW 1.23.3 Fix Pack 5 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to include and execute arbitrary files via a .. dot dot in the 1 boxname parameter to...
CVE-2008-5860
Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...
CVE-2008-5859
SQL injection vulnerability in index.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showpage parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter...
CVE-2008-5764
The CVE-2008-5764 entry affects WorkSimple 1.2.1 and describes a PHP remote file inclusion in calendar.php exploitable when register_globals is enabled. An attacker can supply a URL in the lang parameter to execute arbitrary PHP code. The connected documents confirm the vulnerability details but ...
CVE-2008-5764
PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter...
ClaSS 0.8.6.0 File Disclosure
ClaSS http://www.laex.org/class/ - =0.8.60 - magicquotesgpc = Off registerglobals = On - File Disclosure/Download - http://site/Class/class/scripts/export.php?ftype= /../../path/to/Class/school.php /../../path/to/Class/dbhconnect.php /../../etc/passwd - Timeline - Author notified: Dec 19 Patch...
BloofoxCMS 0.3.4 - lang Local File Inclusion
BloofoxCMS 0.3.4 - lang Local File Inclusion BloofoxCMS 0.3.4 http://www.bloofox.com/ magicquotesgpc = Off registerglobals = On - File Inclusion - http://site/bloofoxCMS0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00 Also vulnerable: dialog.php?theme=...
phpLD 3.3 (page.php name) Blind SQL Injection Vulnerability
No description provided by source. phpLD 3.3 Blind SQL Injection http://www.phplinkdirectory.com/ magicquotesgpc = Off registerglobals = On Vulnerable: GET http://site/phpld/page.php?name= True Request: validpagename' or 1=1 False Request: validpagename' or 1=0 Try this urlencode: validpagename' ...
Injader CMS SQL Injection
Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000, CHAR32,CHAR0, NULL, NULL, NULL FROM...
OneOrZero helpdesk 1.6.x. - Arbitrary File Upload
!/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: In 'tinfo.php' script there are function named uploadAttachment through which we are able to upload files. It does not checks what the file is uploaded. EXPLOIT WORK:...
Многочисленные уязвимости в Phpclanwebsite <= 1.23.3 Fix Pack #5
Многочисленные уязвимости в Phpclanwebsite = 1.23.3 Fix Pack 5 Описание: Были обнаружены многочисленные уязвимости в CMS Phpclanwebsite версии 1.23.3 Fix Pack 5 и ниже. 1. Множественные уязвимости типа "Чтение произвольных файлов" File Including Уязвимость существует по причине того, что возможен...
Injader CMS 2.1.1 - 'id' SQL Injection
Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000, CHAR32,CHAR0, NULL, NULL, NULL FROM...