41 matches found
ttCMS 4 - ez_sql.php?lib_path Remote File Inclusion
ttCMS 4 - ezsql.php?libpath Remote File Inclusion DEVIL TEAM - HACKING POLISH TEAM Author: Kacper a.k.a Rahim Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam -------------------------------------------- Pozdro dla wszystkich z kanalu IRC oraz...
ttCMS 4 - 'ez_sql.php?lib_path' Remote File Inclusion
DEVIL TEAM - HACKING POLISH TEAM Author: Kacper a.k.a Rahim Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam -------------------------------------------- Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM. ttCMS = v4 ezsql.php libpath RFI...
ttCMS <= v4 (ez_sql.php lib_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ===================================================================== ttCMS = v4 ezsql.php libpath Remote File Inclusion Vulnerability ===================================================================== DEVIL TEAM - HACKING POLISH TEAM...
CVE-2003-1458
SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name...
CVE-2003-1459
Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the 1 template parameter in News.php or 2 installdir parameter in install.php...
CVE-2003-0320
header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcmsuseradmin parameter to "1" and modifying the adminroot parameter to point to a URL that contains a Trojan horse header.inc.php script...
CVE-2003-0320
header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcmsuseradmin parameter to "1" and modifying the adminroot parameter to point to a URL that contains a Trojan horse header.inc.php script...
CVE-2003-0320
CVE-2003-0320 affects ttCMS 2.3 and earlier. The vulnerability allows remote attackers to inject arbitrary PHP code by setting ttcms_user_admin=1 and altering admin_root to point to a URL containing a Trojan horse header.inc.php script. Documented impact indicates possible arbitrary PHP code exec...
More vulnerabilities in ttForum/ttCMS -> SQL injection
Advisory name: SQL Injection-Bug in ttForum all versions Application: ttForum - all versions Vendor: www.ttforum.com Status: Vendor of ttForum was contacted but didn't reply Impact: Attacker can get Administrator-rights on forum Platforms: any Technical description: ---------------------- Everybo...
ttCMS/ttForum multiple bugs
SQL injection via username in Profile.php. PHP injection in News.php, install.php...
ttCMS 2.22.3 ttForum 1.1 - index.php Instant-Messages Preferences SQL Injection
ttCMS 2.22.3 ttForum 1.1 - index.php Instant-Messages Preferences SQL Injection source: https://www.securityfocus.com/bid/7634/info A problem with ttCMS/ttForum could make it possible for a remote user to launch SQL injection attacks. It has been reported that a problem exists in the...
ttCMS 2.2/2.3 / ttForum 1.1 - 'index.php' Instant-Messages Preferences SQL Injection
source: https://www.securityfocus.com/bid/7634/info A problem with ttCMS/ttForum could make it possible for a remote user to launch SQL injection attacks. It has been reported that a problem exists in the Instant-Messages script distributed as part of the software. Due to insufficient sanitizing ...
ttCMS 2.2 Multiple Vulnerabilities
The remote server is running a version of ttCMS that is prone to code injection as well as SQL injection attacks. An attacker may use these flaws to execute arbitrary PHP code on this host or to take the control of the remote database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Remote code execution in ttCMS <=v2.3
Advisory name: Remote code execution in ttCMS 2.2.0/2.2.1 Application: ttCMS v2.3 and older versions Vendor: www.ttcms.com Status: Vendor was contacted but didn't reply - after posting about another hole on his forums, my account was banned Impact: Attacker can execute arbitrary php code Platform...
ttCMS 2.22.3 - header.php Remote File Inclusion
ttCMS 2.22.3 - header.php Remote File Inclusion source: https://www.securityfocus.com/bid/7625/info A remote file include vulnerability has been reported for ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'header.php' script, it is possible for a remote attacker to...
ttCMS 2.2/2.3 - 'header.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/7625/info A remote file include vulnerability has been reported for ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'header.php' script, it is possible for a remote attacker to include a malicious PHP file in a URL...
ttCMS 2.2 ttForum 1.1 - news.php?template Remote File Inclusion
ttCMS 2.2 ttForum 1.1 - news.php?template Remote File Inclusion source: https://www.securityfocus.com/bid/7542/info A remote file include vulnerability has been reported for both ttForum and ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'News.php' and 'Install.php...
ttcms and ttforum exploits
hope this is the right place to send this exploit info, I found three diffrent exploits for a forum software / cms software: ------------------------------------------------------------------------------------------------------------------------------------------------ Affected Product: ttCMS or...
ttCMS 2.2 ttForum 1.1 - install.php?installdir Remote File Inclusion
ttCMS 2.2 ttForum 1.1 - install.php?installdir Remote File Inclusion source: https://www.securityfocus.com/bid/7542/info A remote file include vulnerability has been reported for both ttForum and ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'News.php' and...
ttCMS 2.2 / ttForum 1.1 - 'install.php?installdir' Remote File Inclusion
source: https://www.securityfocus.com/bid/7542/info A remote file include vulnerability has been reported for both ttForum and ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'News.php' and 'Install.php' scripts, it is possible for a remote attacker to include a...