1725 matches found
SugarCRM unserialize() PHP Code Execution
This module exploits a php unserialize vulnerability in SugarCRM use exploit/unix/webapp/sugarcrm/unserializeexec msf undefinedunserializeexec show actions ...actions... msf undefinedunserializeexec set ACTION msf undefinedunserializeexec show options ...show and set options... msf...
Kleeja Uploader <= 1.0.1 CSRF Delete all uploaded files
Exploit for php platform in category web applications Exploit Title: Kleeja Uploader escape$search'userip' . '%' ' : ''; ln:168| //add the generated search sentence to the query ln:169| $query'WHERE' = "$sizethan $filenamee $upsthan $exte $repthan $usernamee $lstdthan $exte $ipp";build$query;...
SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution
Exploit for php platform in category web applications populateFromArrayunserializebase64decode$query; include/generic/Save2.php:197: $currentquerybypagearray = unserializebase64decode$currentquerybypage; include/MVC/Controller/SugarController.php:593: $REQUEST =...
SugarCRM CE 6.3.1 - Unserialize() PHP Code Execution
SugarCRM CE 6.3.1 - Unserialize PHP Code Execution populateFromArrayunserializebase64decode$query; include/generic/Save2.php:197: $currentquerybypagearray = unserializebase64decode$currentquerybypage; include/MVC/Controller/SugarController.php:593: $REQUEST =...
Insecure Unserialize Vulnerability in FLOW3
More info at https://www.neos.io/blog/flow-sa-2012-001.html...
Insecure Unserialize Vulnerability in FLOW3
More info at https://www.neos.io/blog/flow-sa-2012-001.html...
Several Vulnerabilities in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting, Information Disclosure, Insecure Unserialize Component Type: TYPO3 Core Affected Versions: 4.4.0 up to 4.4.13, 4.5.0 up to 4.5.13, 4.6.0 up to 4.6.6 and development releases of the 4.7 and 6.0 branch. Vulnerability Type...
VulnCheck KEV: CVE-2014-7235
htdocsari/includes/login.php in the ARI Framework module/Asterisk Recording Interface ARI in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ariauth cookie, related to the PHP unserialize function, as exploited in the wild in...
Multiple vulnerabilities in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting XSS, Information Disclosure, Authentication Delay Bypass, Unserialize vulnerability, Missing Access Control. Component Type: TYPO3 Core Affected Versions: 4.3.11 and below, 4.4.8 and below, 4.5.3 and below Vulnerability...
PHP code execution vulnerability references summary-vulnerability warning-the black bar safety net
A code execution function In PHP you can execute the Code of the function. Such as eval , assert , theand system and exec and shellexec and passthru and escapeshellcmd and pcntlexec , etc. demo code 1.1: The second file contains the code injection The file containing the function in the specific...
CakePHP <= 1.3.5 / 1.2.8 unserialize() Vulnerability-vulnerability warning-the black bar safety net
| Source: CakePHP = 1.3.5 / 1.2.8 unserialize Vulnerability felix |at| malloc. im =========================================================================== ==== Overview: "CakePHP is a rapid development framework for PHP that provides an extensible architecture for developing, maintaining, and...
CakePHP 1.3.51.2.8 - Unserialize() File Inclusion
CakePHP 1.3.51.2.8 - Unserialize File Inclusion Source: http://securityreason.com/securityalert/8026 CakePHP data; $token = urldecode$check'Token''fields'; if strpos$token, ':' list$token, $locked = explode':', $token, 2; $locked = unserializestrrot13$locked; -- snip -- The $check array contains...
CakePHP 1.3.5/1.2.8 - 'Unserialize()' File Inclusion
Source: http://securityreason.com/securityalert/8026 CakePHP data; $token = urldecode$check'Token''fields'; if strpos$token, ':' list$token, $locked = explode':', $token, 2; $locked = unserializestrrot13$locked; -- snip -- The $check array contains our POST data and $locked is a simple rot-13...
DEBIAN-CVE-2010-4335
The validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted dataTokenfields value that is processed by the unserialize function, as demonstrated by...
CVE-2010-4335
The validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted dataTokenfields value that is processed by the unserialize function, as demonstrated by...
Code injection
The validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted dataTokenfields value that is processed by the unserialize function, as demonstrated by...
CVE-2010-4335
The validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted dataTokenfields value that is processed by the unserialize function, as demonstrated by...
CVE-2010-4335
CakePHP 1.2.8 and 1.3.x up to 1.3.5 are affected. The _validatePost function in libs/controller/components/security.php processes a crafted data[_Token][fields] value with unserialize, allowing remote attackers to modify the internal Cake cache and execute arbitrary code (demonstrated via modifyi...
CVE-2010-4335
The validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted dataTokenfields value that is processed by the unserialize function, as demonstrated by...
