65 matches found
FTPDMIN 0.96 - Arbitrary File Disclosure
!/usr/bin/perl ftpdmin 0.96 Arbitrary File Disclosure Exploit Vulnerability Disclosure by 1 Slach or 2 Slach Tested on Win XP SP2 but it work in other box environment Abouts Exploit : first thing after we exec the application it make our box a simple ftp server so like we see if we want conect in...
CVE-2008-3909
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery CSRF attacks and delete or modify data via unspecified requests...
PYSEC-2008-1
Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...
CVE-2008-0703
CVE-2008-0703 affects sflog! 0.96 with multiple directory traversal flaws that allow remote attackers to read arbitrary files via a .. in the (1) permalink or (2) section parameter to index.php, potentially involving includes/entries.inc.php and other files included by index.php. The connected so...
sflog-disclose.txt
sflog! 0.96 remote file disclosure vulnerabilities download http://sourceforge.net/projects/sflog/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd...
sflog! 0.96 remote file disclosure vulnerabilities
sflog! 0.96 remote file disclosure vulnerabilities download http://sourceforge.net/projects/sflog/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd...
sflog! 0.96 - Remote File Disclosure
sflog! 0.96 - Remote File Disclosure sflog! 0.96 remote file disclosure vulnerabilities download http://sourceforge.net/projects/sflog/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd...
sflog! 0.96 Remote File Disclosure Vulnerabilities
No description provided by source. sflog! 0.96 remote file disclosure vulnerabilities download http://sourceforge.net/projects/sflog/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd...
sflog! 0.96 Remote File Disclosure Vulnerabilities
Exploit for unknown platform in category web applications ================================================== sflog! 0.96 Remote File Disclosure Vulnerabilities ================================================== sflog! 0.96 remote file disclosure vulnerabilities download...
sflog! 0.96 - Remote File Disclosure
sflog! 0.96 remote file disclosure vulnerabilities download http://sourceforge.net/projects/sflog/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/sflog/?blog=test&permalink=../../../../../../../../../../etc/passwd...
DEBIAN-CVE-2007-5828
Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...
CVE-2007-5828
Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...
CVE-2007-5828
Cross-site request forgery (CSRF) vulnerability in Django 0.96 is exposed in the admin panel, allowing remote attackers to change passwords via a request to admin/auth/user/1/password/. The issue stems from the default configuration not enabling the CSRF protection module, though Debian notes thi...
PT-2007-6792 · Django · Django
Name of the Vulnerable Software and Affected Versions: Django version 0.96 Description: A cross-site request forgery CSRF issue exists in the admin panel, allowing remote attackers to change passwords of arbitrary users via a request to "admin/auth/user/1/password/". This issue is disputed by...
CVE-2007-5712
The internationalization i18n framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service memory consumption via many HTTP requests with large...
Format string
Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name...
smbftpd 0.96 format string vulnerability
smbftpd 0.96 format string vulnerability -------------------------------------------------------------------------- Versions: 0.96 maybe earlier versions as well Date: 01 Oct 2007 Author: Jerry Illikainen email: [email protected] www: debork.se Introduction ------------ "SmbFTPD is a FTP daemon for...
smbftpd -- format string vulnerability
Secunia reports: Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name...
smbftpd 0.96 SMBDirList-function Remote Format String Exploit
Exploit for linux platform in category remote exploits ============================================================= smbftpd 0.96 SMBDirList-function Remote Format String Exploit ============================================================= / smbftpd 0.96 Proof of concept tested with smbftpd 0.96...
