0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Horde Horde_Image::factory driver Argument Local File Inclusion
[# Exploit Title: Horde Horde_Image::factory driver Argument Local File Inclusion # Google Dork: intitle:horde # Date: 10-02-2011 # Author: skysbsb # Software Link: http://www.horde.org/download/ # Version: Horde 3.3.2 # Tested on: linux # CVE : CVE-2009-0932 The original disclosure was done by Gunnar Wrobel from Horde team.. it was found in a code audit (january 2009). It's an old vuln(2009) but still unpublished in exploit-db. There is a lot of vulnerables sites out there. Just try google =) Vuln description: The version of Horde, Horde Groupware, or Horde Groupware Webmail Edition installed on the remote host fails to filter input to the 'driver' argument of the 'Horde_Image::factory' method before using it to include PHP code in 'lib/Horde/Image.php'. Regardless of PHP's 'register_globals' and 'magic_quotes_gpc' settings, an unauthenticated attacker can exploit this issue to view arbitrary files or possibly to execute arbitrary PHP code on the remote host, subject to the privileges of the web server user id. Fix: If using Horde, upgrade to version 3.3.3 / 3.2.4 or later. If using Horde Groupware, upgrade to version 1.2.2 / 1.1.5 or later. If using Horde Groupware Webmail Edition, upgrade to version 1.2.2/1.1.5 or later. PoC: http://www.vulnsite.com/horde/util/barcode.php ?type=../../../../../../../../../../../etc/./passwd%00 # 0day.today [2024-11-15] #