EUVD-2008-2348

Malware in sbrugna...

Vulnerabilities in Smeego

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в Smeego. Insufficient Anti-Automation: Уязвимость на странице http://site/index.php?name=YourAccount&op=newuser...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Smeego: automation protection bypass, crossite scripting...

Directory traversal

Directory traversal vulnerability in index.php in Smeego 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie...

CVE-2008-2352

Directory traversal vulnerability in index.php in Smeego 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie...

CVE-2008-2352

Directory traversal vulnerability in index.php in Smeego 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie...

CVE-2008-2352

CVE-2008-2352 documents a directory traversal in index.php of Smeego 1.0 where disabling magic_quotes_gpc allows remote attackers to include and execute arbitrary local files via a .. in the lang cookie. The issue is caused by insufficient validation of the cookie value used in file inclusion, en...

Smeego CMS vulnerability

Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming & Security Group http://dark-coders.4rh.eu -------------------------------------------------------- Contact: 0indotemailatgmaildotcom -------------------------------------------------------- Greetings to:...

smeego-lfi.txt

Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming & Security Group http://dark-coders.4rh.eu File: mainfile.php if $displayerrors == 1 // We don't se any errors ; @iniset'displayerrors', 1; else @iniset'displayerrors', 0; if isset$newlang if...

Smeego 1.0 (Cookie lang) Local File Inclusion Exploit

No description provided by source. Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming & Security Group http://dark-coders.4rh.eu -------------------------------------------------------- Contact: 0indotemailatgmaildotcom ------------------------------------------------------...

Smeego 1.0 - Cookie lang Local File Inclusion

Smeego 1.0 - Cookie lang Local File Inclusion Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming & Security Group http://dark-coders.4rh.eu File: mainfile.php if $displayerrors == 1 // We don't se any errors ; @iniset'displayerrors', 1; else @iniset'displayerrors', 0; if...

Smeego 1.0 (Cookie lang) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ===================================================== Smeego 1.0 Cookie lang Local File Inclusion Exploit ===================================================== Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming &...

Smeego 1.0 - 'Cookie lang' Local File Inclusion

Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming & Security Group http://dark-coders.4rh.eu File: mainfile.php if $displayerrors == 1 // We don't se any errors ; @iniset'displayerrors', 1; else @iniset'displayerrors', 0; if isset$newlang if...