274 matches found
CSRF attack message thrown when JSESSIONID is changed
Symptoms: Anything that is using DWR will fail. Meaning: page editor is fully or partially unusable and it may display the text "Draft saving timed out" on top of the text area. At the same time, the following error messages are printed in the Confluence log: noformat 2009-05-15 08:06:36,011 ERRO...
Protect your site with URL rewriting
Over at Microsoft’s MSDN magazine, there’s a really interesting article by Bryan Sullivan suggesting a defense-in-depth strategy to protect Web sites and applications from cross-site scripting XSS and cross-site request forgery XSRF attacks. Here’s the gist of Sullivan’s recommendation: Attacks...
Fedora Update for lighttpd FEDORA-2008-2262
Check for the Version of lighttpd OpenVAS Vulnerability Test Fedora Update for lighttpd FEDORA-2008-2262 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Globsy <= 1.0 Remote File Rewriting Exploit
No description provided by source. !/usr/bin/php -q ?php / ---------------------------------------------------------------------- Globsy = 1.0 Remote File Rewriting Exploit Discovered By StAkeR aka athos - StAkeRathotmaildotit Discovered On 12/10/2008...
Globsy 1.0 - Remote File Rewriting
!/usr/bin/php -q '".$filename."' could not be opened."; 39. fwrite$handle, $data or die"Write: The file '".$filename."' could not be writen."; $mode is $POST'mode' and $data = $POST'data' so you can rewrite or create any file / errorreporting0; iniset"defaultsockettimeout",5; $host =...
Globsy 1.0 - Remote File Rewriting
Globsy 1.0 - Remote File Rewriting !/usr/bin/php -q '".$filename."' could not be opened."; 39. fwrite$handle, $data or die"Write: The file '".$filename."' could not be writen."; $mode is $POST'mode' and $data = $POST'data' so you can rewrite or create any file / errorreporting0;...
Globsy <= 1.0 Remote File Rewriting Exploit
Exploit for unknown platform in category web applications =========================================== Globsy '".$filename."' could not be opened."; 39. fwrite$handle, $data or die"Write: The file '".$filename."' could not be writen."; $mode is $POST'mode' and $data = $POST'data' so you can rewrit...
CVE-2008-4359
lighttpd before 1.4.20 compares URIs to patterns in the 1 url.redirect and 2 url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data...
php session ID leakage
The outputaddrewritevar function in PHP before 5.2.5 rewrites local forms in which the ACTION attribute references a non-local URL, which allows remote attackers to obtain potentially sensitive information by reading the requests for this URL, as demonstrated by a rewritten form containing a loca...
[SECURITY] Fedora 9 Update: lighttpd-1.4.19-4.fc9
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
itcms-exec.txt
=========================================================================================================================== | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...
ItCMS 1.9 - boxpop.php Remote Code Execution
ItCMS 1.9 - boxpop.php Remote Code Execution =========================================================================================================================== | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...
ItCMS 1.9 - 'boxpop.php' Remote Code Execution
=========================================================================================================================== | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...
ItCMS 1.9 (boxpop.php) Remote Code Execution Vulnerability
No description provided by source. =========================================================================================================================== | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...
ItCMS 1.9 (boxpop.php) Remote Code Execution Vulnerability
Exploit for unknown platform in category web applications ========================================================== ItCMS 1.9 boxpop.php Remote Code Execution Vulnerability ==========================================================...
[SECURITY] Fedora 8 Update: lighttpd-1.4.19-4.fc8
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
[SECURITY] Fedora 8 Update: lighttpd-1.4.18-6.fc8
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
[SECURITY] Fedora 7 Update: lighttpd-1.4.18-3.fc7
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
pblang499-exec.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original Here: http://www.inj3ct-it.org/exploit/pbl.txt...
PBLang <= 4.99.17.q Remote File Rewriting / Remote Command Execution
--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original Here:...