LokiCMS 0.3.4 - writeconfig() Remote Command Execution

LokiCMS 0.3.4 - writeconfig Remote Command Execution Author: GiReX Homepage: http://girex.altervista.org CMS: LokiCMS 0.3.4 URL: http://www.lokicms.com/ Description: LokiCMS is still vulnerable to Remote Command Execution see: http://milw0rm.com/exploits/5408 The exploit changed becouse the vars...

LokiCMS 0.3.4 writeconfig() Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================================ LokiCMS 0.3.4 writeconfig Remote Command Execution Exploit ============================================================ Author: GiReX CMS: LokiCMS 0.3.4 URL:...

LokiCMS admin.php文件绕过安全限制漏洞

BUGTRAQ ID: 29448 LokiCMS是一款简单易用的网络内容管理系统。 LokiCMS的admin.php文件中存在逻辑错误，如果远程攻击者在所提交的HTTP POST请求中设置了LokiACTION和其他参数的话，则无需管理权限就可以设置CMS main settings。 以下是有漏洞的代码段： admin.php Lines:24-42 if isset $POST && isset $POST'LokiACTION' && strlen trim $POST'LokiACTION' 0 // we have an action to do switch trim...

Design/Logic Flaw

Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program...

CVE-2007-0022: Undefined Security Weakness

Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program...

CVE-2007-0022

Untrusted search path vulnerability in writeconfig in Apple Mac OS X 10.4.8 allows local users to gain privileges via a modified PATH that points to a malicious launchctl program...

CVE-2007-0022

CVE-2007-0022: Mac OS X 10.4.8 writeconfig untrusted search path allows local privilege escalation by manipulating PATH to point to a malicious launchctl. The vulnerability stems from an untrusted search path in writeconfig, enabling a local user to gain privileges. Public details in the connecte...

Mac OS X writeconfig privilege escalation

launchctl utility is executed by relative path from suid application...

MOAB-21-01-2007: System Preferences writeconfig Local Privilege Escalation Vulnerability

Summary Apple provides the following description in the The Preference Application documentation: System Preferences is the standard location for presenting system-level preferences on OSX. The preference panes shipped with Mac OS X include panes affecting hardware such as the Sound, Mouse, and...