121 matches found
vTiger CRM 5.2.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities (1)
source: https://www.securityfocus.com/bid/49927/info vtiger CRM is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Aardvark Topsites PHP 'index.php' Multiple Cross Site Scripting Vulnerabilities
This host is running Aardvark Topsites PHP CMS and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbaardvarktopsitesphpcmsxssvuln.nasl 5676 2017-03-22 16:29:37Z cfi $ Aardvark Topsites PHP 'index.php' Multiple Cross Site Scripting Vulnerabilities Authors: Antu...
CVE-2010-3911
Multiple cross-site scripting XSS vulnerabilities in vtiger CRM before 5.2.1 allow remote attackers to inject arbitrary web script or HTML via 1 the username aka defaultusername field or 2 the password field in a Users Login action to index.php, or 3 the label parameter in a Settings GetFieldInfo...
Aardvark Topsite XSS vulnerability
Hi, I found XSS on Aardvark Topsites PHP system. Dork: "Powered by Aardvark Topsites" "SQL Queries" XSS: sitepath/index.php?a=search&q=2220onmouseover3dalertString.fromCharCode88,83,8320par3d22 Can use POST to effect the "email", "title", "u" and "url" parameters either on the same way. Tested...
php 5.2.1 代码执行漏洞
No description provided by source...
php 5.2.1 代码执行漏洞
No description provided by source...
PHP 5.2.1 格式化字符串漏洞
No description provided by source...
CVE-2009-2302
Cross-site scripting XSS vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected...
Wordpress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit
Exploit for unknown platform in category web applications ============================================================== Wordpress 2.6.1 SQL Column Truncation Admin Takeover Exploit ============================================================== !/usr/bin/php =5.2.1 you'll need to be as well, in...
CVE-2007-2727
The mcryptcreateiv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls phprandr with an uninitialized seed variable and therefore always generates the same initialization vector IV, which might allow context-dependent attackers to decrypt...
XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit
Exploit for unknown platform in category remote exploits ============================================================== XAMPP for Windows Connect$POST'host', $POST'user', $POST'password', $POST'database'; echo "DBServer: $POSTdbserver"; $result = $db-Execute"SELECT FROM $POSTtable";...
PHP < 4.4.5/5.2.1 - '_SESSION' Deserialization Overwrite
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...
PHP 4.4.6/5.2.1 - ext/gd Already Freed Resources Usage
?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...
PHP <= 4.4.6 / 5.2.1 array_user_key_compare() ZVAL dtor Local Exploit
Exploit for linux platform in category local exploits ===================================================================== PHP = 4.4.6 / 5.2.1 arrayuserkeycompare ZVAL dtor Local Exploit ===================================================================== ?php...
PHP 5.2.0/5.2.1 Rejected Session ID Double Free Exploit
Exploit for linux platform in category local exploits ======================================================= PHP 5.2.0/5.2.1 Rejected Session ID Double Free Exploit ======================================================= ?php //////////////////////////////////////////////////////////////////////...
PHP <= 5.2.1 substr_compare() Information Leak Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
PHP < 4.4.5 / 5.2.1 php_binary Session Deserialization Information Leak
Exploit for multiple platform in category local exploits ======================================================================= PHP 4.4.5 / 5.2.1 phpbinary Session Deserialization Information Leak ======================================================================= ?php...
CVE-2007-0905
PHP before 5.2.1 allows attackers to bypass safemode and openbasedir restrictions via unspecified vectors in the session extension. NOTE: it is possible that this issue is a duplicate of CVE-2006-6383...
CVE-2007-0905
PHP before 5.2.1 allows attackers to bypass safemode and openbasedir restrictions via unspecified vectors in the session extension. NOTE: it is possible that this issue is a duplicate of CVE-2006-6383...
