e107 <= 0.7.11 Arbitrary Variable Overwriting

GulfTech Security Research August 07, 2008 Vendor : Steve Dunstan URL : http://www.e107.org/ Version : e107 = 0.7.11 Risk : Arbitrary Variable Overwriting Description: e107 is a popular full featured content management system written in php. Unfortunately e107 suffers from an arbitrary variable...

moziloCMS 1.10.1 (download.php) Arbitrary Download File Exploit

No description provided by source. !/usr/bin/perl moziloCMS 1.10.1 Perl exploit discovered & written by Ams ax330d doggy gmail dot com DESCRIPTION: Vulnerability hides in "download.php", which we can use to download any file we want to. Here, for example, "admin/conf/logindata.conf". Btw, not ver...

moziloCMS 1.10.1 - download.php Arbitrary Download File

moziloCMS 1.10.1 - download.php Arbitrary Download File !/usr/bin/perl moziloCMS 1.10.1 Perl exploit discovered & written by Ams ax330d doggy gmail dot com DESCRIPTION: Vulnerability hides in "download.php", which we can use to download any file we want to. Here, for example,...

CVE-2008-3293

Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the dlfilename parameter...

ibase <= 2.03 (download.php) Remote File Disclosure Vulnerability

No description provided by source. Name: AFD i-base = 2.03 Author: Dyshoo Vendor: http://www.i-base.net/ Dork: "inurl:ibase site:de" http://site/ibase/zubehoer/download.php?filename=file Database config: http://site/ibase/zubehoer/download.php?filename=../config/configdb.php...

CVE-2008-3293: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in EZWebAlbum allows remote attackers to read arbitrary files via the dlfilename parameter...

EZWebAlbum (dlfilename) Remote File Disclosure Vulnerability

EZWebAlbum dlfilename Remote File Disclosure Vulnerability |, .-. .-. ,| Found by : Ghost Hacker R-H TeaM | o/ o | My Site web : Real-hack.Net |/ / | Found by : Ghost Hacker R-H TeaM Home page : www.Real-hack.net Email : [email protected] Name Script : EZWebAlbum Download Script :...

ezwebalbum-disclose.txt

EZWebAlbum dlfilename Remote File Disclosure Vulnerability |, .-. .-. ,| Found by : Ghost Hacker R-H TeaM | o/ \o | My Site web : Real-hack.Net |/ /\ | Found by : Ghost Hacker R-H TeaM Home page : www.Real-hack.net Email : [email protected] Name Script : EZWebAlbum Download Script :...

EZWebAlbum (dlfilename) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ EZWebAlbum dlfilename Remote File Disclosure Vulnerability ============================================================ EZWebAlbum dlfilename Remote File Disclosure Vulnerability...

File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities

No description provided by source. | File Store PRO 3.2 Blind SQL Injection | || Download from: http://upoint.info/cgi/demo/fs/filestore.zip - Need admin rights: /confirm.php: code ifisset$GET"folder" && $GET"folder"!="" $folder=$GET"folder"; else exit"Bad Request"; ifisset$GET"id" && $GET"id"!="...

File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities =============================================================== | File Store PRO 3.2 Blind SQL Injection | || -...

1024 CMS <= 1.4.4 Multiple Remote/Local File Inclusion Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-027 Application: 1024 CMS Versions Affected: 1.4.3, 1.4.4 RFC Vendor URL: http://www.1024cms.com/...

CVE-2008-2969: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to read arbitrary files via a .. dot dot in the dfile parameter...

CVE-2008-2034: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wp-downloadmonitor/download.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

CVE-2008-1646

CVE-2008-1646 is an SQL injection vulnerability in the WordPress plugin WP-Download 1.2 , affecting the file wp-download.php via the dl_id parameter. The underlying issue is improper handling of input leading to arbitrary SQL execution by remote attackers. Public details in the connected document...

Directory traversal

Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote attackers to read arbitrary files via a .. dot dot in the url parameter...

Directory traversal

Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases TRUC 0.11.0 allows remote attackers to read arbitrary files via a .. dot dot in the uploadfilename parameter...

CVE-2008-0814

CVE-2008-0814 describes a directory traversal in TRUC (Tracking Requirements & Use Cases) 0.11.0. The vulnerability affects download.php where the upload_filename parameter can be tainted with .. to read arbitrary files, enabling an attacker to disclose file contents. The issue is rooted in a mis...

CVE-2008-0813: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote attackers to read arbitrary files via a .. dot dot in the url parameter...