658 matches found
CVE-2007-5813
ISPworker Download.PHP is affected by multiple directory traversal vulnerabilities. The root cause is insufficient sanitation of user input in download.php, enabling remote attackers to read arbitrary files via .. in the ticketid and filename parameters. Affected versions include ISPworker 1.21 a...
CVE-2007-5813: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary files via a .. dot dot in the 1 ticketid and 2 filename parameters...
ISPworker 1.21 download.php Remote File Disclosure Vulnerability
No description provided by source. ISPworker 1.21 Remote File Disclosure Vulnerability http://ispworker.de/files/ispworker-1.21.tar.gz /module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 /module/ticket/download.php?filename=../../../../../../../../../etc/passwd sebug.net...
ISPworker 1.21 download.php Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ================================================================ ISPworker 1.21 download.php Remote File Disclosure Vulnerability ================================================================ ISPworker 1.21 Remote File Disclosure...
ISPworker 1.21 - download.php Remote File Disclosure
ISPworker 1.21 - download.php Remote File Disclosure ISPworker 1.21 Remote File Disclosure Vulnerability http://ispworker.de/files/ispworker-1.21.tar.gz /module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00...
ISPworker 1.21 - 'download.php' Remote File Disclosure
ISPworker 1.21 Remote File Disclosure Vulnerability http://ispworker.de/files/ispworker-1.21.tar.gz /module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 /module/ticket/download.php?filename=../../../../../../../../../etc/passwd milw0rm.com 2007-10-31...
CVE-2007-5706
CVE-2007-5706 describes an absolute path traversal vulnerability in the download.php of Jeebles Directory 2.9.60. An attacker can read arbitrary files by supplying a full pathname in the query string. The vulnerability is documented across multiple sources and is classified as a high-severity iss...
CVE-2007-5706: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in download.php in Jeebles Directory 2.9.60 allows remote attackers to read arbitrary files via a full pathname in the query string. NOTE: some of these details are obtained from third party information...
CVE-2003-1465: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary files...
Jeebles Directory Local File Inclusion
By hack2prison - vnbrain.net member This is exploit: http://site/path/download.php?file Example: http://site/path/download.php?settings2.inc.php...
jeebles-lfi.txt
By hack2prison - vnbrain.net member This is exploit: http://site/path/download.php?file Example: http://site/path/download.php?settings2.inc.php...
Sql injection
Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitrary code by writing PHP sequences to the php-stats-options record in the options table, which is used in an eval function call by 1 admin.php, 2 click.php, 3 download.php, and...
CVE-2007-5453
Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitrary code by writing PHP sequences to the php-stats-options record in the options table, which is used in an eval function call by 1 admin.php, 2 click.php, 3 download.php, and...
CVE-2007-5453
CVE-2007-5453 concerns Php-Stats 0.1.9.2, which contains multiple eval-injection vulnerabilities. The issue allows remote authenticated administrators to execute arbitrary code by injecting PHP sequences into the php-stats-options record in the _options table, which is subsequently evaluated via ...
CVE-2007-5453: Improper Control of Generation of Code
Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitrary code by writing PHP sequences to the php-stats-options record in the options table, which is used in an eval function call by 1 admin.php, 2 click.php, 3 download.php, and...
Unfixed XSS vulnerability at www.vicman.net
Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.vicman.net, which at the time of submission ranked 6003 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is currently...
chupix-file.txt
Chupix CMS 0.2.3 download.php Remote File Download Vulnerability P.Script : http://sourceforge.net/project/showfiles.php?groupid=134930 download.php Lain:18-57 - ifisset$GET'fichier' ", "", $result; $num = trim$result; else $num = 0; $num++; $msg = ""; if!isdir$repertoire mkdir $repertoire, 0755;...
CVE-2007-4957: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. dot dot in the 1 fichier or 2 repertoire parameter, or create arbitrary directories via a .. dot dot in the 3 repertoire parameter...
Chupix CMS 0.2.3 (download.php) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Chupix CMS 0.2.3 download.php Remote File Disclosure Vulnerability ==================================================================== Chupix CMS 0.2.3 download.php Remo...
Chupix CMS 0.2.3 (download.php) Remote File Disclosure Vulnerability
No description provided by source. Chupix CMS 0.2.3 download.php Remote File Download Vulnerability P.Script : http://sourceforge.net/project/showfiles.php?groupid=134930 download.php Lain:18-57 - ifisset$GET'fichier' --------------XXXX // téléchargement du fichier $file = "archives/"...