STG Security Advisory 2004-12-20.16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041220-16 PHP source injection and cross-site scripting vulnerabilities in ZeroBoard Revision 1.2 Date Published: 2004-12-20 KST Last Update: 2004-12-24 Disclosed by SSR Team [email protected] Summary =======...

STG Security Advisory: [SSA-20041220-16] PHP source injection and cross-site scripting vulnerabilities in ZeroBoard

STG Security Advisory: SSA-20041220-16 PHP source injection and cross-site scripting vulnerabilities in ZeroBoard Revision 1.2 Date Published: 2004-12-20 KST Last Update: 2004-12-24 Disclosed by SSR Team [email protected] Summary ======= ZeroBoard is one of widely used web BBS applications...

bug in Club 1.0 - 1.3

Hi, security team www.rst.bb1.ru --= Advisory 6 =-- Product: Club 1.0 - 1.3 http://www.lyanguzov.inc.ru/ Vuln: PHP source injection The php-script Club version 1.0 - 1.3 maybe version 1.2 vuln too, i can't find this version is vuln for PHP source injection. Bug found in file club.php: scip if $p ...

Bookmar4U and Active PHP Bookmarks Vulnerabilities

Program: Bookmark4U V.1.8.3 website: http://bookmark4u.sourceforge.net/ Vendor status: Informed 30 days ago Problem: Source injection Files affected: inc/dbase.php inc/config.php inc/common.load.php ? Proof of concept: dbase.php?prefix=http://... Solution: The security of the inc/ directory is...

PHP source injection in PHPAddress

PHP source injection in PHPAddress Description PHP-Address is a collection of PHP3-Scripts works on PHP4 too for maintaing a small web-based address-database. It can be found at http://phpaddress.huebsch-gemacht.de/ Workaround Change the global.php3 file so it looks like this: ?php c Copyright in...

PHP source injection in osCommerce

PHP source injection in osCommerce ---------------------------------- Product Description osCommerce is an open source e-commerce solution under on going development by the open source community. Its feature packed out-of-the- box installation allows store owners to setup, run, and maintain their...

malicious PHP source injection

JCC Security Advisory June 15, 2002 malicious PHP source injection Description Zeroboard is one of popular PHP web boards in Korea. When allowurlfopen = On and registerglobals = On in php.ini, Zeroboard has vulnerability because head.php contains dangerous codes. So an attacker can include any...