CVE-2009-3701

Multiple cross-site scripting XSS vulnerabilities in the administration interface in Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1...

CVE-2009-3701

CVE-2009-3701 affects Horde Application Framework before 3.3.6, Horde Groupware before 1.2.5, and Horde Groupware Webmail Edition before 1.2.5. It enables remote XSS via PATH_INFO to admin/phpshell.php, admin/cmdshell.php, or admin/sqlshell.php, related to PHP_SELF. Impact is arbitrary script/HTM...

phpMyAdmin 2.7.0 全局变量覆盖导致文件包含漏洞

No description provided by source...

Automne.ws CMS 4.0.0rc2 - Multiple Remote File Inclusions

Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability Created By 1nd0n3s14n l4m3r c -- 14/12/2oo9 No Sanitize Variable $SERVER"DOCUMENTROOT" automne/imagezoom.php?DOCUMENTROOT=Shell automne/isalive.php?DOCUMENTROOT=Shell automne/admin/backtrace.php?DOCUMENTROOT=Shell...

Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability

No description provided by source. Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability Created By 1nd0n3s14n l4m3r c -- 14/12/2oo9 No Sanitize Variable $SERVER"DOCUMENTROOT" automne/imagezoom.php?DOCUMENTROOT=Shell automne/isalive.php?DOCUMENTROOT=Shell automne/admin/backtrace.php?DOCUMENTROOT=She...

Mandriva Security Advisory MDVSA-2009:038-1 (blender)

The remote host is missing an update to blender announced via advisory MDVSA-2009:038-1. OpenVAS Vulnerability Test $Id: mdksa20090381.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:038-1 blender Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandriva Security Advisory MDVSA-2009:059-1 (xchat)

The remote host is missing an update to xchat announced via advisory MDVSA-2009:059-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

PHP memory_limit 环境变量导致远程执行代码

No description provided by source...

Hewlett-Packard OpenView NNM nnmRptConfig.exe Template Variable strcat Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nnmRptConfig.exe CGI executable accessible via the I...

Huawei MT882 Modem/Router - Multiple Vulnerabilities

Version: V100R002B020 ARG-T Firmware Release: 3.7.9.98 Greets to my bests friends: DeepLook, R00T, systemfailure, Ciber34, ANDSQLiTor, LaPeke Greets to friend: Scuarplex, Crl, KiKoArg, ZeRO, DNSX, PunkiD DecodeX01atgmaildotcom Target device ip 10.0.0.2:80 default ip:port Server information...

CVE-2009-4018

The procopen function in ext/standard/procopen.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the 1 safemodeallowedenvvars and 2 safemodeprotectedenvvars directives, which allows context-dependent attackers to execute programs with an arbitrary environment via the env parameter, a...

Code injection

The procopen function in ext/standard/procopen.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the 1 safemodeallowedenvvars and 2 safemodeprotectedenvvars directives, which allows context-dependent attackers to execute programs with an arbitrary environment via the env parameter, a...

PHP vulnerability full solution-vulnerability warning-the black bar safety net

PHP web page security issues For PHP website mainly exist the following types of attacks: 1. Command injectionCommand Injection 2. eval injectionEval Injection 3. Client scripting attacksScript Insertion 4. Cross-site scripting attacksCross Site Scripting, XSS 5. SQL injectionattacksSQL injection...

Wind news site content management system explosive path vulnerability-vulnerability warning-the black bar safety net

Wind news site content management system the latest burst path vulnerability in! Directly burst the absolute path Methods: Directly in the URL added on the Admin/User/getGroupDebate. asp to it!!!! Microsoft VBScript runtime error-Error '800a01f4' Variable is undefined: 'Conn'...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

CVE-2009-3891

Cross-site scripting XSS vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter aka the selection variable...

PHP and ASP upload vulnerability exploit-vulnerability warning-the black bar safety net

1 pass exploit the principles just for the form format of the upload of asp and php scripts ncnetcat For the submission packet the dos interface to run under: nc-vv www.. com 8 01.txt -vv: echo 8 0: the www port 1.txt: is your data packet to be transmitted use of more methods, please check this...

CVE-2009-2685

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable...

Sql injection

Multiple SQL injection vulnerabilities in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via the 1 forum parameter to modules/forum/post.php and possibly 2 forumid variable to modules/forum/class/class.permissions.php...

织梦(Dedecms)select_soft_post.php页面变量未初始漏洞

漏洞产生文件位于include\dialog\selectsoftpost.php，其变量$cfgbasedir没有正确初始化，导致可以饶过身份认证和系统变量初始化文件，导致可以上传任意文件到指定目录。其漏洞利用前提是registerglobals=on,可以通过自定义表单为相关的变量赋值。 Dedecms 5.5 暂无 请关注官方补丁 html head titleDedecms v55 RCE Exploit Codz By flyh4t/title /head body style="FONT-SIZE: 9pt" ---------- Dedecms v55 RCE Exploi...