dokuwiki -- multiple privilege escalation vulnerabilities

Dokuwiki reports: This security update fixes problems in the XMLRPC interface where ACLs where not checked correctly sometimes, making it possible to access and write information that should not have been accessible/writable. This only affects users who have enabled the XMLRPC interface default i...

Nucleus v3.61 Multiple Remote File Include

Exploit for php platform in category web applications Nucleus v3.61 === Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://sourceforge.net/projects/nucleuscms/ ========================================= nucleus3.61/action.php?DIRLIBS=y0ur g4y...

php: NULL pointer dereference in XML-RPC extension

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpcdecoderequest function, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash and possibly have unspecified oth...

Arachni v0.2.1 - penetration testers Framework - latest release

"Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications." This is the official change log: Major performance improvements Major system refactoring and code clean-up Major module API...

Unfixed XSS vulnerability at xmlrpc-epi.sourceforge.net

Security researcher SeeMe, has submitted on 16/10/2010 a cross-site-scripting XSS vulnerability affecting xmlrpc-epi.sourceforge.net, which at the time of submission ranked 155 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...

SOL12156 - PHP xmlrpc vulnerability - CVE-2010-0397

This security advisory describes a PHP xmlrpc vulnerability. For information about this advisory, refer to the Common Vulnerabilities and Exposures website at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the information may be removed...

USN-989-1: PHP vulnerabilities

Auke van Slooten discovered that PHP incorrectly handled certain xmlrpc requests. An attacker could exploit this issue to cause the PHP server to crash, resulting in a denial of service. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 9.04 and 9.10. CVE-2010-0397 It was discovered that the...

SuSE9 Security Update : xmlrpc-c (YOU Patch Number 12591)

This update of libxmlrpc is not vulnerable to denial of service bugs that can occur while processing malformed XML input. - CVSS v2 Base Score: 5.0 moderate AV:N/AC:L/Au:N/C:N/I:N/A:P: Permissions, Privileges, and Access Control CWE-264. CVE-2009-2625 - CVSS v2 Base Score: 5.0 MEDIUM...

Require user to answer CAPTCHA after three failed attempts

Require user to answer CAPTCHA after three failed attempts. For SOAP and XMLRPC this means that the user will have to open a browser to answer the CAPTCHA, similar to how google does it. This issue has been rated MODERATE. Please refer to http://confluence.atlassian.com/x/ZILmD for details on oth...

Nucleus CMS v.3.51 (DIR_LIBS) Multiple Vulnerability

Vulnerability: Nucleus v3.51 other or lower version may also be affected Vendor: http://nucleuscms.org/ Category: Input Validation Error Impact: rfi/lfi Multiple Vulnerability Details: Multiple Vulnerability has been found in Nucleus v3.51 because it fails to sufficiently sanitize user-supplied...

Mandriva Update for php MDVSA-2010:068 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:068 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

PHP xmlrpc扩展空指针引用拒绝服务漏洞

BUGTRAQ ID: 38708 CVECAN ID: CVE-2010-0397 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP所使用的xmlrpc扩展在解码畸形xml-rpc请求时存在空指针引用错误。如果请求为有效的xml但没有包含预期的标签，xmlrpcdecoderequest就会生成分段错误并导致崩溃。 PHP 5.3.1 厂商补丁： PHP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.php.net ?php $req = '?xml...

PHP xmlrpc Extension Multiple Remote Denial of Service Vulnerabilities

Exploit for multiple platform in category dos / poc ====================================================================== PHP xmlrpc Extension Multiple Remote Denial of Service Vulnerabilities ====================================================================== Vulnerable: PHP PHP 5.3.1 PHP PH...

CVE-2010-0397

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpcdecoderequest function, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash and possibly have unspecified oth...

Null pointer dereference

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpcdecoderequest function, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash and possibly have unspecified oth...

CVE-2010-0397

The CVE-2010-0397 entry concerns the PHP xmlrpc extension. Affected: PHP 5.3.1; vulnerability arises when xmlrpc_decode_request’s first argument is missing a methodName element. Root cause: improper handling leads to a NULL pointer dereference. Impact: context-dependent attackers can cause a deni...

CVE-2010-0397

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpcdecoderequest function, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash and possibly have unspecified oth...

CVE-2010-0397

The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpcdecoderequest function, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash and possibly have unspecified oth...

Debian DSA-2014-1 : moin - several vulnerabilities

Several vulnerabilities have been discovered in moin, a python clone of WikiWiki. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0668 Multiple security issues in MoinMoin related to configurations that have a non-empty superuser list, the xmlrpc...

PHP 5.3.1 Multiple DoS Vulnerabilities

PHP is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php";...