248 matches found
WAP Web Application Security-vulnerability warning-the black bar safety net
Author: lake2 80sec EMail: lake280sec.com Site: http://www.80sec.com Date: 2008-6-10 --------------------------------- Directory 0x00 is utter bullshit. 0x01 WML and WMLScript 0x02 WML injection attacks 0x03 WML injected into what can be done 0x04 WAP site session security 0x05 PostScript...
CVE-2008-2074
Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to 1 eng.writeMsg.php, 2 eng.adCreate.php, 3 eng.adCreateSave.php, 4...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to 1 eng.writeMsg.php, 2 eng.adCreate.php, 3 eng.adCreateSave.php, 4...
CVE-2008-2074
Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to 1 eng.writeMsg.php, 2 eng.adCreate.php, 3 eng.adCreateSave.php, 4...
CVE-2008-2074
CVE-2008-2074 affects Harris Wap Chat 1.0. Multiple PHP remote file inclusion vulnerabilities occur when register_globals is enabled. Attackers can cause arbitrary PHP code execution by supplying a URL in the sysFileDir parameter to a set of scripts (eng.writeMsg.php, eng.adCreate.php, eng.adCrea...
harris-rfi.txt
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Harris Wap Chat Discovered By : k1n9k0ng Scripts site : http://www.successkid.com/ Download Script : http://www.successkid.com/blogs/?p=2 Thanks To : sekuritionline, semprol, bajingan, mimid,...
Harris WapChat 1 - Multiple Remote File Inclusions
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Harris Wap Chat Discovered By : k1n9k0ng Scripts site : http://www.successkid.com/ Download Script : http://www.successkid.com/blogs/?p=2 Thanks To : sekuritionline, semprol, bajingan, mimid,...
Harris WapChat 1 - Multiple Remote File Inclusions
Harris WapChat 1 - Multiple Remote File Inclusions +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : Harris Wap Chat Discovered By : k1n9k0ng Scripts site : http://www.successkid.com/ Download Script : http://www.successkid.com/blogs/?p=2 Thanks T...
The CMWAP of the test-vulnerability warning-the black bar safety net
Author: demonalex Source: demonalex the diary of a madman 1 test ARP. The first test is the BAN of inspiration, in the CMWAP under the ARP test, but through the GPRS into the CMWAP is the PPP Protocol with the ARP in different Protocol stacks, so the ARP in GPRS connected to the CMWAP is not...
Microsoft Windows Mobile短信处理器来源迷惑漏洞
BUGTRAQ ID: 26091 CVECAN ID: CVE-2007-5493 Windows Mobile是微软开发的用于手机的操作系统。 Windows Mobile的短信处理器中存在安全漏洞，如果发送了特制的WAP PUSH消息的话，就可能在接收者的手机上隐藏原始短信的发送者。 原始PDU如1所示，以下PDU会导致Pocket PC电话版本的SMS处理器错误的解码PDU，这样发送者的手机号码和发送时间都是错误的。 1 PDU（自动换行） 079144775810065051220C914477619269060004A7600605040B8423F025060803AE81...
Design/Logic Flaw
The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message that causes the PDU to be incorrectly decoded...
CVE-2007-5493
The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message that causes the PDU to be incorrectly decoded...
CVE-2007-5493
CVE-2007-5493 affects Microsoft Windows Mobile 2005 Pocket PC Phone Edition. The vulnerability exists in the SMS handler where a specially crafted WAP PUSH can cause the PDU to be decoded incorrectly, allowing an attacker to hide the original sender field of an SMS without user interaction. The c...
CVE-2007-5493
The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message that causes the PDU to be incorrectly decoded...
Use the phone to control the server-the vulnerabilities and early warning-the black bar safety net
It seems like the title is a bit scary, in fact, is the use of WAP plus WebShell。 Now many phones support WAP Internet access, as long as the slightly modified existing Web Backdoor code can be achieved WAP browser access. Traditional Web backdoors and browser interaction HTML, and WAP browser is...
CVE-2007-0795
Multiple PHP remote file inclusion vulnerabilities in Wap Portal Server 1.x allow remote attackers to execute arbitrary PHP code via a URL in the language parameter to 1 index.php and 2 admin/index.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Wap Portal Server 1.x allow remote attackers to execute arbitrary PHP code via a URL in the language parameter to 1 index.php and 2 admin/index.php...
CVE-2007-0795
Multiple PHP remote file inclusion vulnerabilities in Wap Portal Server 1.x allow remote attackers to execute arbitrary PHP code via a URL in the language parameter to 1 index.php and 2 admin/index.php...
CVE-2007-0795
The CVE-2007-0795 entry concerns Wap Portal Server 1.x with multiple PHP remote file inclusion vulnerabilities. The vulnerable components are index.php and admin/index.php, where an attacker can supply a URL via the language parameter to execute arbitrary PHP code on the server. The root cause is...
wps1-rfi.txt
+-------------------------------------------------------------------- + + Wap Portal Serve 1. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Wap Portal Server + Venedor ...........: http://www.sakic.net + Class ...............