phpwind_2.0.1_job.php_任意文件创建漏洞

No description provided by source...

Design/Logic Flaw

Dictionary in Apple Mac OS X 10.5.8 allows remote attackers to create arbitrary files with any contents, and thereby execute arbitrary code, via crafted JavaScript, related to a "design issue."...

Internet Explorer FTP Client Directory Traversal (CVE-2004-1376)

Microsoft Internet Explorer IE incorporates an FTP client component that is capable of communicating with standard FTP servers. To invoke the FTP functionality in order to view files on an FTP server, a URI of the ftp:// scheme is used. When no specific file is indicated with the URL such as...

GLSA-200910-03 : Adobe Reader: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200910-03 Adobe Reader: Multiple vulnerabilities Multiple vulnerabilities were discovered in Adobe Reader. For further information please consult the CVE entries and the Adobe Security Bulletin referenced below. Impact : A remote...

RHEL 5 : java-1.4.2-ibm (RHSA-2008:0955)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0955 advisory. - Java RE allows Same Origin Policy to be Bypassed 6687932 CVE-2008-3104 - Java Web Start, arbitrary file creation 6703909 CVE-2008-3112 -...

iDefense Security Advisory 08.06.09: IBM AIX libC _LIB_INIT_DBG Arbitrary File Creation Vulnerability

iDefense Security Advisory 08.04.09 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 04, 2009 I. BACKGROUND IBM's AIX is a Unix operating system based on System V, which runs on the PowerPC PPC architecture. For more information, visit the product web site at the following URL...

CVE-2009-1314

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

CVE-2008-6591

CVE-2008-6591 affects LightNEasy “no database” (flat) version 1.2.2 (and possibly SQLite 1.2.2). The vulnerability allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php. Connected docs confirm the affected software and the vulnerable para...

Chilkat FTP ActiveX (SaveLastError) Insecure Method Exploit

No description provided by source. html titleChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2/titlebrbr body h3ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit/h3 !c0d3d by callAX ---- 0wN thE b0x p4l - Greetings to str0ke and Fr0git0...

Constructr CMS 3.02.5 SQL Injection / Traversal

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

Chilkat FTP - ActiveX (SaveLastError) Insecure Method

ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit function Doit File = "c:\boot.ini" ctrl.SaveLastErrorFile milw0rm.com 2008-12-28...

Chilkat FTP - ActiveX (SaveLastError) Insecure Method

Chilkat FTP - ActiveX SaveLastError Insecure Method ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit function Doit File = "c:\boot.ini" ctrl.SaveLastErrorFile milw0rm.com 2008-12-28...

Chilkat FTP ActiveX (SaveLastError) Insecure Method Exploit

Exploit for unknown platform in category remote exploits =========================================================== Chilkat FTP ActiveX SaveLastError Insecure Method Exploit =========================================================== ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll...

Constructr CMS <= 3.02.5 Stable Multiple Remote Vulnerabilities

No description provided by source. Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info:...

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfil...

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

Constructr CMS <= 3.02.5 Stable Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Constructr CMS = 3.02.5 Stable Multiple Remote Vulnerabilities =============================================================== Constructr CMS http://constructr-cms.org/ - =...

Chilkat Socket activex 2.3.1.1 Remote Arbitrary File Creation Exploit

No description provided by source. html titleChilkatSocket.DLL Arbitrary File Creation/titlebrbr body Company Name : Chilkat Software, Inc.brbr Vulnerable DLL : ChilkatSocket.DLLbrbr DLL's version : 2,3,1,1brbr Object Safety Report : br Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289Cbr...

chilkat-create.txt

ChilkatSocket.DLL Arbitrary File Creation Company Name : Chilkat Software, Inc. Vulnerable DLL : ChilkatSocket.DLL DLL's version : 2,3,1,1 Object Safety Report : Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289C RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety...

Chilkat Socket ActiveX 2.3.1.1 - Arbitrary File Creation

ChilkatSocket.DLL Arbitrary File Creation Company Name : Chilkat Software, Inc. Vulnerable DLL : ChilkatSocket.DLL DLL's version : 2,3,1,1 Object Safety Report : Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289C RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety...