yappa-ng-rfi.txt

yappa-ng 2.3.2 RFI ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : yappa-ng 2.3.2 ---------- Download : http://downloads.sourceforge.net/yappa-ng/yappa-ng232.zip?modtime=1114464654&bigmirror=0 ---------- Vuln Type: RFI ---------- Registerglobals: ON...

Yappa-NG Admin_Module_Deldir.Inc.PHP远程文件包含漏洞

Yappa-NG是一款基于PHP的WEB应用程序。 Yappa-NG不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'AdminModuleDeldir.Inc.PHP'脚本对用户提交的'configpathsrcinclude'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 yappa-ng yappa-ng 2.3.1 yappa-ng yappa-ng 2.3 .0 yappa-ng yappa-ng 2.2.2 yappa-ng yappa-ng 2.2.1 yappa-ng yappa-...

yappa-ng <= v2.3.1 (admin_modules) Remote File Inclusion Exploit

============================================================================================== yappa-ng = v2.3.1 adminmodules Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

yappa-ng <= 2.3.1 (admin_modules) Remote File Include Vulnerability

No description provided by source. ============================================================================================== yappa-ng = v2.3.1 adminmodules Remote File Inclusion Exploit =============================================================================================== Critical...

yappa-ng <= 2.3.1 (admin_modules) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== yappa-ng = 2.3.1 adminmodules Remote File Include Vulnerability ===================================================================...

Yappa-ng 2.3.1 - admin_modules Remote File Inclusion

Yappa-ng 2.3.1 - adminmodules Remote File Inclusion ============================================================================================== yappa-ng = v2.3.1 adminmodules Remote File Inclusion Exploit...

Yappa-ng 2.3.1 - 'admin_modules' Remote File Inclusion

============================================================================================== yappa-ng = v2.3.1 adminmodules Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

yappang231.txt

GulfTech Security Research May 11th, 2005 Vendor : Fritz Berger URL : http://sourceforge.net/projects/yappa-ng/ Version : yappa-ng 2.3.1 && Earlier Risk : Multiple Vulnerabilities Description: Yappa-NG is the second generation new and improved version of Yappa yet another php photo album. There a...

Yappa-NG Multiple Vulnerabilities

GulfTech Security Research May 11th, 2005 Vendor : Fritz Berger URL : http://sourceforge.net/projects/yappa-ng/ Version : yappa-ng 2.3.1 && Earlier Risk : Multiple Vulnerabilities Description: Yappa-NG is the second generation new and improved version of Yappa yet another php photo album. There a...

CVE-2005-1311

Cross-site scripting XSS vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1312

PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors...

CVE-2005-1311

CVE-2005-1311 affects Yappa-NG prior to 2.3.2. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. According to the NVD entry, the issue has a CVSS v2 base score of 4.3 (Medium) with Network access, no aut...

CVE-2005-1311

Cross-site scripting XSS vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2005-1312

Affected software: Yappa-NG before 2.3.2. Vulnerabilities: PHP remote file inclusion (CVE-2005-1312) that could allow arbitrary PHP code execution via unknown vectors; and multiple include/XSS flaws due to failure to sanitize user input, as described in connected Nessus details. Exploitation deta...

yappa-ng < 2.3.2 Multiple Vulnerabilities

The version of yappa-ng installed on the remote host is prone to multiple file include and cross-site scripting vulnerabilities due to its failure to sanitize user-supplied script input when calling various include scripts directly. By exploiting the file include vulnerabilities, an attacker can...

Yappa-NG < 2.3.2 Multiple vulnerabilities

Binary data 2859.prm...

CVE-2005-1312

PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors...

Yappa-ng 1.x2.x - Cross-Site Scripting

Yappa-ng 1.x2.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/13372/info yappa-ng is prone to an unspecified cross-site scripting vulnerability. This issue may allow for theft of cookie-based authentication credentials or other attacks. The vendor has not published any specific...

Yappa-ng 1.x/2.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/13372/info yappa-ng is prone to an unspecified cross-site scripting vulnerability. This issue may allow for theft of cookie-based authentication credentials or other attacks. The vendor has not published any specific details about this vulnerability other...

Yappa-ng 1.x/2.x - Remote File Inclusion

source: https://www.securityfocus.com/bid/13371/info yappa-ng is prone to a remote file include vulnerability. This issue may let remote attackers include and execute malicious remote PHP scripts. The vendor has not published any specific details about this vulnerability other than stating that i...