Bitfolge Snif Index.PHP远程文件包含漏洞

Bitfolge Snif是一款基于PHP的WEB应用程序。 Bitfolge Snif不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞以WEB进程权限执行任意指令。 问题是'index.php'脚本对用户提交的'externalConfig'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以进程权限执行任意指令。 Bitfolge snif 1.5.2 http://www.bitfolge.de/snif-en.html?PHPSESSID=a7c62b8ceb6d1273df1486a4d061214c...

CVE-2006-6285

CVE-2006-6285 affects Kai Blankenhorn Bitfolge (snif) up to version 1.5.2. The issue is a PHP remote file inclusion vulnerability in index.php via the externalConfig parameter, enabling arbitrary PHP code execution. Note: CVE entries and third parties dispute the vulnerability because externalCon...

snif <= 1.5.2 (index.php) Remote File Inclusion Vulnerability

No description provided by source. snif simple and nice index file Remote File Include Vulnerability Download Site: http://www.bitfolge.de/download/snif152.zip Found & Exploiting By: S.W.A.T. advistory: wWw.Xmors.CoM - wWw.XmorS.NeT POC:...

Snif Cross Site Scripting

The remote host is running the SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11949";...

Snif File Disclosure

It is possible to make the remote host return the content of any world readable file by requesting a path outside the bound HTML root directory from the Snif program. SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

CVE-2003-1334

Cross-site scripting XSS vulnerability in Kai Blankenhorn Bitfolge simple and nice index file aka snif before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2003-1335

Directory traversal vulnerability in Kai Blankenhorn Bitfolge simple and nice index file aka snif before 1.2.5 allows remote attackers to download files from locations above the snif directory...

Bitfolge Snif 1.2.6 - index.php Path Cross-Site Scripting

Bitfolge Snif 1.2.6 - index.php Path Cross-Site Scripting source: https://www.securityfocus.com/bid/9179/info Bitfolge Snif is prone to a cross-site scripting vulnerability. As a result, hostile HTML and script code may be embedded in a malicious link to a site hosting the vulnerable software. If...

[UNIX] Snif Script Cross Site Scripting Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Bitfolge Snif 1.2.6 - 'index.php' Path Cross-Site Scripting

source: https://www.securityfocus.com/bid/9179/info Bitfolge Snif is prone to a cross-site scripting vulnerability. As a result, hostile HTML and script code may be embedded in a malicious link to a site hosting the vulnerable software. If such a link is visited by a victim user, the...

[UNIX] Snif File Disclosure Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...