«
Expand/Collapse
81 items tagged "page"
Related tags:
php [+],
inclusion [+],
capture [+],
system [+],
phpmyadmin [+],
page parameter [+],
sql [+],
cross site scripting [+],
xss [+],
service vulnerability [+],
file upload [+],
error [+],
denial of service [+],
authentication [+],
vulnerability [+],
xen [+],
wikkawiki [+],
webtech [+],
useragent header [+],
uri [+],
sql injection [+],
spam [+],
simple [+],
script [+],
router function [+],
python script [+],
page option [+],
page fault [+],
logging feature [+],
least three different ways [+],
joomla [+],
fixup [+],
file php [+],
file [+],
execution [+],
eval [+],
comment [+],
command execution [+],
cms [+],
board [+],
asp [+],
arbitrary code execution [+],
account creation [+],
webwizard [+],
webapps [+],
txt [+],
tracking [+],
stack overflows [+],
stab [+],
slides [+],
parameter [+],
page id [+],
page asp [+],
mark zuckerberg [+],
guard [+],
fun [+],
facebook [+],
easy [+],
asidus [+],
zero day [+],
video mark [+],
video [+],
unexpected manner [+],
toy [+],
time [+],
textads [+],
tabnapping [+],
splashworks splashsite [+],
splashworks [+],
snapproof [+],
sharepoint [+],
security breach [+],
search page [+],
search [+],
sculpture [+],
remote file include vulnerability [+],
read [+],
privilege escalation vulnerability [+],
prefix [+],
precision technologies [+],
precision [+],
powerpc [+],
phpmyfaq [+],
page 6 [+],
oscss [+],
org uk [+],
opencart [+],
nyt article [+],
news [+],
monoloco [+],
mine [+],
microsoft [+],
local privilege escalation [+],
linux kernel [+],
linux [+],
kinetic sculpture [+],
kinetic [+],
kernel [+],
kenetic sculpture [+],
jetdirect [+],
improved [+],
ignition [+],
idevspot [+],
hp jetdirect device [+],
hp jetdirect [+],
hacks [+],
hackaday [+],
got [+],
google [+],
gmail [+],
g page [+],
fremens [+],
found [+],
file deletion [+],
embryocore [+],
dorncms [+],
doors [+],
don [+],
document object model [+],
device [+],
delete [+],
darknet [+],
cutenews [+],
crownweb [+],
creative [+],
clic [+],
chris burden [+],
cfm [+],
bugtraq [+],
attack [+],
application [+],
ExploitsVulnerabilities [+],
day [+],
admin [+]
-
13:29
»
Packet Storm Security Exploits
This Metasploit module exploits a vulnerability found in Dorn Content Management Script (CMS), version 1.4. By abusing the add_page.php file, the attacker can upload/add a new file (.php) to the /cms/pages/ directory without any authentication, which results in arbitrary code execution.
-
13:29
»
Packet Storm Security Recent Files
This Metasploit module exploits a vulnerability found in Dorn Content Management Script (CMS), version 1.4. By abusing the add_page.php file, the attacker can upload/add a new file (.php) to the /cms/pages/ directory without any authentication, which results in arbitrary code execution.
-
13:29
»
Packet Storm Security Misc. Files
This Metasploit module exploits a vulnerability found in Dorn Content Management Script (CMS), version 1.4. By abusing the add_page.php file, the attacker can upload/add a new file (.php) to the /cms/pages/ directory without any authentication, which results in arbitrary code execution.
-
-
14:58
»
Packet Storm Security Exploits
This Metasploit module exploits a vulnerability found in WikkaWiki. When the spam logging feature is enabled, it is possible to inject PHP code into the spam log file via the UserAgent header, and then request it to execute our payload. There are at least three different ways to trigger spam protection, this module does so by generating 10 fake URLs in a comment (by default, the max_new_comment_urls parameter is 6). Please note that in order to use the injection, you must manually pick a page first that allows you to add a comment, and then set it as 'PAGE'.
-
14:58
»
Packet Storm Security Recent Files
This Metasploit module exploits a vulnerability found in WikkaWiki. When the spam logging feature is enabled, it is possible to inject PHP code into the spam log file via the UserAgent header, and then request it to execute our payload. There are at least three different ways to trigger spam protection, this module does so by generating 10 fake URLs in a comment (by default, the max_new_comment_urls parameter is 6). Please note that in order to use the injection, you must manually pick a page first that allows you to add a comment, and then set it as 'PAGE'.
-
14:58
»
Packet Storm Security Misc. Files
This Metasploit module exploits a vulnerability found in WikkaWiki. When the spam logging feature is enabled, it is possible to inject PHP code into the spam log file via the UserAgent header, and then request it to execute our payload. There are at least three different ways to trigger spam protection, this module does so by generating 10 fake URLs in a comment (by default, the max_new_comment_urls parameter is 6). Please note that in order to use the injection, you must manually pick a page first that allows you to add a comment, and then set it as 'PAGE'.
-
-
18:03
»
Packet Storm Security Exploits
This Metasploit module exploits a vulnerability found in Lotus CMS 3.0's Router() function. This is done by embedding PHP code in the 'page' parameter, which will be passed to a eval call, therefore allowing remote code execution. The module can either automatically pick up a 'page' parameter from the default page, or manually specify one in the URI option.
-
18:03
»
Packet Storm Security Recent Files
This Metasploit module exploits a vulnerability found in Lotus CMS 3.0's Router() function. This is done by embedding PHP code in the 'page' parameter, which will be passed to a eval call, therefore allowing remote code execution. The module can either automatically pick up a 'page' parameter from the default page, or manually specify one in the URI option.
-
18:03
»
Packet Storm Security Misc. Files
This Metasploit module exploits a vulnerability found in Lotus CMS 3.0's Router() function. This is done by embedding PHP code in the 'page' parameter, which will be passed to a eval call, therefore allowing remote code execution. The module can either automatically pick up a 'page' parameter from the default page, or manually specify one in the URI option.
-
-
20:23
»
Hack a Day
There was a recent announcement that G+ opened the doors to businesses and organizations for g+ pages. This means we can have an official G+ page with google’s blessing. We’ve opened one up here. We plan on having “hangouts” from time to time so people can show off what they’ve done. Don’t worry if you’re [...]
-
-
6:16
»
Hack a Day
The blurry image above is a snap of toy cars as they zoom around a multi-lane, multi-level, maniacal-maze called Metropolis II. We originally took a look at the video after the break (do it now!) but found more information on [Chris Burden's] kenetic sculpture in this NYT article. He and eight studio artists began work [...]
-
-
18:22
»
Packet Storm Security Advisories
Zero Day Initiative Advisory 10-130 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the victim must visit a malicious page or open a malicious file. The specific flaw exists within the application's implementation of the NodeIterator interface for traversal of the Document Object Model. Due to the implementation requiring a javascript callback, an attacker can utilize the callback in order to manipulate the contents of the page. By doing so in an unexpected manner, an attacker can cause the process to corrupt memory. Successful exploitation will lead to code execution under the context of the application.