Jacobo Avariento

2 exploits Active since Jul 2006

CVE-2008-5619 EXPLOITDB text WORKING POC

Chuggnutt HTML to Text Converter <5.2.10 - RCE

html2text.php in Chuggnutt HTML to Text Converter, as used in PHPMailer before 5.2.10, RoundCube Webmail (roundcubemail) 0.2-1.alpha and 0.2-3.beta, Mahara, and AtMail Open 1.03, allows remote attackers to execute arbitrary code via crafted input that is processed by the preg_replace function with the eval switch.

View Code

CVE-2006-3747 EXPLOITDB bash WORKING POC

Apache HTTP Server < 1.3.37 - Numeric Error

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.

View Code