EUVD-2002-2085

Malware in sbrugna...

EUVD-2009-0605

Malware in sbrugna...

WikkiTikkiTavi 0.x Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3946/info WikkiTikkiTavi is a freely available engine for running a Wiki site. Wiki sites are web communities which are based on the idea that every webpage is editable by users of the website. WikkiTikkiTavi is back-ende...

CVE-2009-0602

Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/...

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/...

CVE-2009-0602

Unrestricted file upload vulnerability in upload.php in WikkiTikkiTavi 1.11 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/...

CVE-2009-0602

CVE-2009-0602 affects WikkiTikkiTavi 1.11: an unrestricted file upload in upload.php lets remote attackers execute arbitrary code by uploading a file with an executable extension and then accessing it under img/. Root cause is improper handling of uploaded files; CVSSv2 base score 7.5 (HIGH) as s...

WikkiTikkiTavi 'upload.php'任意文件上传漏洞

BUGTRAQ ID: 33647 CNCAN ID：CNCAN-2009020702 WikkiTikkiTavi是一款Wiki引擎。 WikkiTikkiTavi 'upload.php'脚本存在漏洞，远程攻击者可以利用漏洞上传任意PHP文件。 攻击者通过上传恶意PHP文件，可导致以WEB权限执行任意命令。 WikkiTikkiTavi 1.11 厂商解决方案 目前供应商没有提供补丁信息： http://tavi.sourceforge.net/...

WikkiTikkiTavi 1.11 Remote PHP File Upload Vulnerability

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :WikkiTikkiTavi Site :http://tavi.sourceforge.net http://c4team.org/ taviPATH /upload.php http://c4team.org/ taviPATH img/ shell.php Demo:...

WikkiTikkiTavi 1.11 - Arbitrary .PHP File Upload

WikkiTikkiTavi 1.11 - Arbitrary .PHP File Upload ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :WikkiTikkiTavi Site :http://tavi.sourceforge.net http://c4team.org/ taviPATH /upload.php http://c4team.org/ taviPATH img/ shell.php Demo:...

WikkiTikkiTavi 1.11 File Upload

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :WikkiTikkiTavi Site :http://tavi.sourceforge.net http://c4team.org/ taviPATH /upload.php http://c4team.org/ taviPATH img/ shell.php Demo: http://skylined.org/change/tavi/upload.php...

WikkiTikkiTavi 1.11 Remote PHP File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================== WikkiTikkiTavi 1.11 Remote PHP File Upload Vulnerability ======================================================== Script :WikkiTikkiTavi Site :http://tavi.sourceforge.net...

WikkiTikkiTavi 1.11 - Arbitrary '.PHP' File Upload

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :WikkiTikkiTavi Site :http://tavi.sourceforge.net http://c4team.org/ taviPATH /upload.php http://c4team.org/ taviPATH img/ shell.php Demo: http://skylined.org/change/tavi/upload.php...

CVE-2002-2106

PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php...

CVE-2002-2106

CVE-2002-2106 affects the PHP-based application WikkiTikkiTavi (before version 0.21). The vulnerability is a remote file inclusion via the TemplateDir parameter, demonstrated through conflict.php , allowing an attacker to potentially execute arbitrary PHP code. This is the explicit impact describ...

CVE-2002-2106

PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php...

WikkiTikkiTavi 0.x - Remote File Inclusion

WikkiTikkiTavi 0.x - Remote File Inclusion source: https://www.securityfocus.com/bid/3946/info WikkiTikkiTavi is a freely available engine for running a Wiki site. Wiki sites are web communities which are based on the idea that every webpage is editable by users of the website. WikkiTikkiTavi is...

WikkiTikkiTavi 0.x - Remote File Inclusion

source: https://www.securityfocus.com/bid/3946/info WikkiTikkiTavi is a freely available engine for running a Wiki site. Wiki sites are web communities which are based on the idea that every webpage is editable by users of the website. WikkiTikkiTavi is back-ended by a MySQL database and runs on...