eGroupWare 1.14 - (spellchecker.php) Remote Command Execution Exploit

Exploit for php platform in category web applications Exploit Title: eGroupWare 1.14 - 'spellchecker.php' Remote Command Execution Exploit Author: Berk KIRAS Vendor Homepage: https://www.egroupware.org/en/ Version: 1.14 Tested on: Apache Berk KIRAS PwC - Cyber Security Specialist !/usr/bin/python...

FCKEditor Core - (Editor 'spellchecker.php') Cross-Site Scripting

No description provided by source...

FCKeditor /spellchecker.php 页面绝对路径泄露

No description provided by source...

CVE-2014-4037: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor before 2.6.11 and earlier allows remote attackers to inject arbitrary web script or HTML via an array key in the textinputs parameter, a different issue than...

PT-2014-5689

Name of the Vulnerable Software and Affected Versions FCKeditor versions prior to 2.6.11 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via an array key in the textinputs parameter in the spellchecker.php file. Recommendations...

ECShop 2.7.3 spellchecker.php 后门漏洞

No description provided by source...

DSA-2522-1 fckeditor - cross site scripting

Bulletin has no description...

CVE-2012-4000: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the printtextinputsvar function in editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters...

AlegroCart 1.2.7 Command Execution

Exploit Title: AlegroCart = 1.2.7 spellchecker.php Remote Command Execution Vulnerability Author: T0x!c Date: 22/02/2012 Facebook Page: www.facebook.com/DzTem E-mail: [email protected] Category:: webapps Google Dork: intext:" Powered by AlegroCart Your Store Name © 2012" Vendor:...

CVE-2011-3732: Exposure of Sensitive Information to an Unauthorized Actor

eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/fckeditor/editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php and certain other files...

PT-2011-4622

Name of the Vulnerable Software and Affected Versions eggBlog version 4.1.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as lib/fckeditor/editor/dialog/fck...

CVE-2010-3313: Improper Control of Generation of Code

phpgwapi/js/fckeditor/editor/dialog/fckspellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to execute arbitrary commands v...

CVE-2006-2878: Undefined Security Weakness

The spellchecker spellcheck.php in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by pregreplace with the /e executable modifier...