Debian: Security Advisory (DSA-1520-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1520-1 (smarty)

The remote host is missing an update to smarty announced via advisory DSA 1520-1. OpenVAS Vulnerability Test $Id: deb15201.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1520-1 smarty Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1520-1 : smarty - insufficient input sanitising

It was discovered that the regex module in Smarty, a PHP templating engine, allows attackers to call arbitrary PHP functions via templates using the regexreplace plugin by a specially crafted search string. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

[SECURITY] [DSA 1520-1] New smarty packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1520-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 16, 2008 http://www.debian.org/security/faq -...

DSA-1520-1 smarty - arbitrary code execution

Bulletin has no description...

Security fix for the ALT Linux 7 package smarty version 2.6.19-alt1

March 12, 2008 Vladimir V Kamarzin 2.6.19-alt1 - 2.6.19. Security fixes: + CVE-2008-1066 Smarty "regexreplace" Modifier Template Security Bypass...

Security fix for the ALT Linux 6 package smarty version 2.6.19-alt1

March 12, 2008 Vladimir V Kamarzin 2.6.19-alt1 - 2.6.19. Security fixes: + CVE-2008-1066 Smarty "regexreplace" Modifier Template Security Bypass...

Barryvan Compo Manager 0.5pre-1 Remote File Inclusion Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ barryvancompo-0.3 Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title:...

CVE-2008-1066

The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...

Spoofing

The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...

CVE-2008-1066

The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...

CVE-2008-1066

The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...

CVE-2008-1066

The CVE-2008-1066 entry concerns Smarty (PHP template engine). The vulnerable component is the modifier.regex_replace.php plug‑in, which does not properly sanitize input related to the ASCII NUL character in a search string. This can allow a remote attacker to call arbitrary PHP functions via tem...

barry-rfi.txt

--==+================================================================================+==-- --==+ barryvancompo-0.3 Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: barryvancompo-0.3 Remote File Inclusion...

Barryvan Compo Manager 0.3 - Remote File Inclusion

--==+================================================================================+==-- --==+ barryvancompo-0.3 Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: barryvancompo-0.3 Remote File Inclusion...

Barryvan Compo Manager 0.3 - Remote File Inclusion

Barryvan Compo Manager 0.3 - Remote File Inclusion --==+================================================================================+==-- --==+ barryvancompo-0.3 Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ9...

CVE-2008-1066: Improper Input Validation

The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...

Xoops-2.0.16 Remote File Inclusion

In the Script Xoops-2.0.16 are Remote File Inclusion Bugs +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Script : xoops-2.0.16-Kararli Discovered By : F10 Contact : [email protected] WebSite : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy...

uebimiau-disclose.txt

---- Uebimiau Web-Mail Remote File Reader ... ITDefence.ru Antichat.ru Uebimiau Web-Mail Remote File Reader Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 //// // //\ \ \...

Tikiwiki CMS tiki-listmovies.php文件目录遍历漏洞

BUGTRAQ ID: 27008 TikiWiki是一款网站内容管理系统，基于PHP+ADOdb+Smarty等技术构建。 TikiWiki的实现上存在输入验证漏洞，远程攻击者可能利用此漏洞非授权访问到服务器上任意文件的部分内容。 TikiWiki的tiki-listmovies.php脚本允许用户获得任意文件的前1000个字节。该脚本将movie参数值设置为$movie，删除最后4字节并添加.xml扩展名，然后调用fopen$confFile,'r'打开文件并读取文件的前1000个字节，接着传送这1000字节用作MovieWidth和MovieHeight...