Directory traversal

Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F encoded dot dot slash in the theme parameter...

CVE-2011-5210

CVE-2011-5210 affects Limny 3.0.0, where a directory traversal is possible in admin/preview.php via the theme parameter (encoded ..%2F) to read arbitrary files. Multiple sources (NVD, OpenVAS) confirm the vulnerability and link to Limny 3.0.0 players; OpenVAS describes it as a global directory tr...

Sciretech 3.0.0 SQL Injection / CSRF Vulnerability

Exploit for php platform in category web applications ========================================================= Vulnerable Software: Sciretech ® Multimedia Manager Version 3.0.0 Aka: Sciretech ® File Manager Version 3.0.0 Official site: www.sciretech.com Vulnerabilities: Blind SQL Injection And...

Sciretech (Multiple Products) - Multiple SQL Injections

Sciretech Multiple Products - Multiple SQL Injections source: https://www.securityfocus.com/bid/55390/info Sciretech Multimedia Manager and Sciretech File Manager are prone to multiple SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in a...

Ubuntu Update for linux-ti-omap4 USN-1459-1

Ubuntu Update for Linux kernel vulnerabilities USN-1459-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14591.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ti-omap4 USN-1459-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

gkrellm-info NSE Script

Queries a GKRellM service for monitoring information. A single round of collection is made, showing a snapshot of information at the time of the request. Example Usage nmap -p 19150 --script gkrellm-info Script Output PORT STATE SERVICE 19150/tcp open gkrellm | gkrellm-info: | Hostname: ubu1110 |...

Dolibarr 3.0.0 LFI

Local file include vulnerability in Dolibarr Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

ownCloud <= 3.0.0 Multiple Input Validation Vulnerabilities - Active Check

ownCloud is prone to a URI open-redirection vulnerability, multiple cross-site scripting XSS vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted...

ownCloud 3.0.0 Cross Site Scripting

TC-SA-2012-01: Multiple web-vulnerabilities in ownCloud 3.0.0 Published: 2012/04/18 Version 1.0 Affected products: ownCloud version 3.0.0 others not tested http://owncloud.org References: TC-SA-2012-01 www.tele-consulting.com/advisories/TC-SA-2012-01.txt used for updates CVE-2012-2269 - XSS in...

[waraxe-2012-SA#082] - File Existence Disclosure in Uploadify 3.0.0

waraxe-2012-SA082 - File Existence Disclosure in Uploadify 3.0.0 =============================================================================== Author: Janek Vind "waraxe" Date: 05. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-82.html Description of vulnerable software:...

Uploadify 3.0.0 File Existence Disclosure

waraxe-2012-SA082 - File Existence Disclosure in Uploadify 3.0.0 =============================================================================== Author: Janek Vind "waraxe" Date: 05. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-82.html Description of vulnerable software:...

CVE-2012-1382

Unspecified vulnerability in the Youdao Dictionary com.youdao.dict application 1.6.1, 2.0.12, and 3.0.01 for Android has unknown impact and attack vectors...

ButorWiki Cross Site Scripting

Exploit Title: ButorWiki Cross Site Scripting Date: 16.02.2012 Author: Sony Software Link: http://www.butor.com/ Software Version: 3.0.0 Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/butorwiki-cross-site-scripting.html...

Immunity Canvas: CVE_2012_0056

Name| CVE20120056 ---|--- CVE| CVE-2012-0056 Exploit Pack| CANVAS Description| CVE20120056 linux local root Notes| CVE Name: CVE-2012-0056 VENDOR: Linux Notes: Tested on Ubuntu 11.10 Desktop 32b, kernel 3.0.0-12-generic Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2012-0056 NOTES:...

Linux Kernel 3.0.0 - perf_count_sw_cpu_clock event Denial of Service

Linux Kernel 3.0.0 - perfcountswcpuclock event Denial of Service //Vince / Error with overflows and perf::perfcountswcpuclock / / This test will crash Linux 3.0.0 / / compile with gcc -O2 -o ofloswcpuclockcrash ofloswcpuclockcrash.c / / by Vince Weaver / define GNUSOURCE 1 include include include...

Linux Kernel 3.0.0 - 'perf_count_sw_cpu_clock' event Denial of Service

//Vince / Error with overflows and perf::perfcountswcpuclock / / This test will crash Linux 3.0.0 / / compile with gcc -O2 -o ofloswcpuclockcrash ofloswcpuclockcrash.c / / by Vince Weaver / define GNUSOURCE 1 include include include include include include include include include include include...

TNR Enhanced Joomla Search 3.0.0 SQL Injection

========================================================================================= o TNR Enhanced Joomla Search = SQL Injection Vulnerability Software : comesearch ver 3.0.0 Vendor : http://www.tnrjoomla.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Home :...

ejabberd XML Parsing Denial of Service Vulnerability - Windows

ejabberd is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ejabberd XML Parsing Denial of Service Vulnerability (Windows)

This host is installed with ejabberd and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodejabberddosvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ ejabberd XML Parsing Denial of Service Vulnerability Windows Authors: Sooraj KS Copyright: Copyright c 2011 SecPod...

1ClickUnzip 3.00 - '.zip' Heap Overflow

!/usr/bin/perl +Exploit Title: 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability +Date: 05\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/1-Click-Unzip-Download-77210.html +Version: 3.0.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A use strict; u...