19 matches found
EUVD-2006-7029
Malware in sbrugna...
EUVD-2007-2136
Malware in sbrugna...
ShoutPro <= 1.5.2 (shout.php) Remote Code Injection Exploit
No description provided by source. ?/ File: shoutbox.php Affects: ShoutPro 1.5.2 may affect earlier versions Date: 17th April 2007 Issue Description: =========================================================================== ShoutPro 1.5.2 fails to fully sanitize user input $shout that it writes...
Code injection
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter...
Immunity Canvas: SHOUTPRO_EXEC
Name| shoutproexec ---|--- CVE| CVE-2007-2141 Exploit Pack| CANVAS Description| ShoutPro exec Notes| CVE Name: CVE-2007-2141 VENDOR: Shoutpro.com Notes: Try using nc -e /bin/sh as your command and having a nc -vlp Repeatability: Infinite CVE Url:...
CVE-2007-2141
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter...
CVE-2007-2141
Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter...
CVE-2007-2141
CVE-2007-2141 affects ShoutPro 1.5.2 and is a Direct static code injection vulnerability in shoutbox.php. An attacker can inject arbitrary PHP code into shouts.php via the shout parameter, enabling remote code execution. The underlying root cause is unsanitized input handling in shoutbox.php, lea...
shoutpro-pwn.txt
?php echo "\n"; echo " Special Greetings To - Timq,Warpboy,The-Maggot \n"; echo "\n\n\n"; //Writes Files - Under 100 bytes to meet requireme...
ShoutPro Shoutbox.PHP任意PHP代码执行漏洞
ShoutPro是一款基于PHP的WEB应用程序。 ShoutPro不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Shoutbox.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 ShoutPro 1.5.2 目前没有解决方案提供： http://shoutpro.com/ ?/ File: shoutbox.php Affects: ShoutPro 1.5.2 may affect earlier versions Date: 17th April 2007 Issue&n...
ShoutPro <= 1.5.2 (shout.php) Remote Code Injection Exploit
No description provided by source. ?/ File: shoutbox.php Affects: ShoutPro 1.5.2 may affect earlier versions Date: 17th April 2007 Issue Description: =========================================================================== ShoutPro 1.5.2 fails to fully sanitize user input $shout that it writes...
ShoutPro <= 1.5.2 (shout.php) Remote Code Injection Exploit
Exploit for unknown platform in category web applications =========================================================== ShoutPro ?php echo "...
ShoutPro 1.5.2 - shout.php Remote Code Injection
ShoutPro 1.5.2 - shout.php Remote Code Injection ?php echo "\n"; echo " Special Greetings To - Timq,Warpboy,The-Maggot \n"; echo "\n\n\n"; //Writes Files - Under 100 bytes to meet requirements $temppayload = "...
ShoutPro 1.5.2 - 'shout.php' Remote Code Injection
?php echo "\n"; echo " Special Greetings To - Timq,Warpboy,The-Maggot \n"; echo "\n\n\n"; //Writes Files - Under 100 bytes to meet requirements $temppayload = "%3C%3F%24a%3D...
CVE-2006-7047
include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an alternate bannedips.php file. NOTE: this issue was originally reported as remote file inclusion, but CVE analysis suggests that this cannot be used for code...
CVE-2006-7047
include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an alternate bannedips.php file. NOTE: this issue was originally reported as remote file inclusion, but CVE analysis suggests that this cannot be used for code...
CVE-2006-7047
The CVE-2006-7047 entry concerns include.php in Shoutpro 1.0, where a crafted path parameter could bypass IP ban restrictions by referencing an alternate bannedips.php file. The CVE description notes that this was originally reported as remote file inclusion, but the analysis indicates it cannot ...
Shoutpro 1.0 Version - Remote File Include Vulnerability
SaVSaK.CoM | SpC-x - TheBeKiR | Shoutpro 1.0 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : Shoutpro Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"functions.php"; if $path $ips = file"$path/lists/bannedips.php"...
shoutpro10.txt
SaVSaK.CoM | SpC-x - TheBeKiR | Shoutpro 1.0 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : Shoutpro Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"functions.php"; if $path $ips = file"$path/lists/bannedips.php"...