< Back to JetLib.com

jetlib.sec » Tags » vbseo

« Expand/Collapse

14 items tagged "vbseo"

Related tags: vulnerability [+], php [+], day [+], command execution [+], syntax [+], execution [+], command [+], code [+], arbitrary code [+], webapps [+], version [+], txt [+], lfi [+], inclusion [+], xss [+], vulnerabilities [+], local [+], file [+], crawlability [+]

January 30, 2012
20:29
vBSEO 3.6.0 PHP Code Injection
» ‎ Packet Storm Security Exploits

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php in vBSEO versions 3.6.0 and below. User input passed through 'char_repl' POST parameter is not properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: code vbseo php arbitrary-code vulnerability syntax

20:29
vBSEO 3.6.0 PHP Code Injection
» ‎ Packet Storm Security Recent Files

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php in vBSEO versions 3.6.0 and below. User input passed through 'char_repl' POST parameter is not properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: code vbseo php arbitrary-code vulnerability syntax

20:29
vBSEO 3.6.0 PHP Code Injection
» ‎ Packet Storm Security Misc. Files

This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php in vBSEO versions 3.6.0 and below. User input passed through 'char_repl' POST parameter is not properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
Tags: code vbseo php arbitrary-code vulnerability syntax

January 27, 2012
14:00
[webapps / 0day] - vBSEO
» ‎ 1337day (was: Inj3ct0r, 1337db)

[webapps / 0day] - vBSEO
Tags: vbseo day

June 24, 2011
1:31
vBseo 3.1.0 Remote Command Execution
» ‎ Packet Storm Security Exploits

vBseo version 3.1.0 remote command execution exploit that leverages injecting code into log files.
Tags: vbseo execution command command-execution

1:31
vBseo 3.1.0 Remote Command Execution
» ‎ Packet Storm Security Recent Files

vBseo version 3.1.0 remote command execution exploit that leverages injecting code into log files.
Tags: vbseo execution command command-execution

1:31
vBseo 3.1.0 Remote Command Execution
» ‎ Packet Storm Security Misc. Files

vBseo version 3.1.0 remote command execution exploit that leverages injecting code into log files.
Tags: vbseo execution command command-execution

0:00
Vuln: Crawlability vBSEO 'vbseo.php' Local File Include Vulnerability
» ‎ SecurityFocus Vulnerabilities

Crawlability vBSEO 'vbseo.php' Local File Include Vulnerability
Tags: crawlability vbseo php vulnerability

June 22, 2011
21:00
[webapps / 0day] - vBseo 3.1.0 (vbseo.php vbseourl) Remote Command Execution Exploit
» ‎ 1337day (was: Inj3ct0r, 1337db)

[webapps / 0day] - vBseo 3.1.0 (vbseo.php vbseourl) Remote Command Execution Exploit
Tags: day vbseo php command-execution
January 30, 2011
14:00
[webapps / 0day] - vBSEO 3.5.2 & 3.2.2 - Persistent XSS via LinkBacks
» ‎ 1337day (was: Inj3ct0r, 1337db)

[webapps / 0day] - vBSEO 3.5.2 & 3.2.2 - Persistent XSS via LinkBacks
Tags: vbseo day webapps xss
January 29, 2011
14:00
[webapps / 0day] - vBSEO Sitemap 2.5 & 3.0 - Multiple Vulnerabilities
» ‎ 1337day (was: Inj3ct0r, 1337db)

[webapps / 0day] - vBSEO Sitemap 2.5 & 3.0 - Multiple Vulnerabilities
Tags: vbseo day webapps vulnerabilities
February 20, 2010
12:59
vBseo v3.1.0 Local File Include Vulnerability
» ‎ 1337day (was: Inj3ct0r, 1337db)

vBseo v3.1.0 Local File Include Vulnerability
Tags: vbseo file local vulnerability

12:00
vbseo-lfi.txt
» ‎ Packet Storm Security Recent Files

vBseo version 3.1.0 suffers from a local file inclusion vulnerability.
Tags: version txt vbseo lfi vulnerability inclusion

12:00
vbseo-lfi.txt
» ‎ Packet Storm Security Exploits

vBseo version 3.1.0 suffers from a local file inclusion vulnerability.
Tags: version txt vbseo lfi vulnerability inclusion