342 matches found
Ppim <= 1.0 (Arbitrary File Delete/XSS) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ Ppim New Event"; ? /CODE Exploit : events.php?mode=new&date=XSS CODE events.php?mode=new&date="alert'XSS' ------------------------------- INDEPENDENT KOSOVA H - Etnic ALBANIA...
pPIM 1.0 - Arbitrary File Delete Cross-Site Scripting
pPIM 1.0 - Arbitrary File Delete Cross-Site Scripting Author : BeyazKurt Contact : [email protected] Script : Ppim v1.0 Bu ne bicim script adidir amk :D Download : http://scripts.ringsworld.com/organizers/ppim.zip D0rk : inurl:events.php?listallevents File Delete Vulnerability: upload.php...
pPIM 1.0 - Arbitrary File Delete / Cross-Site Scripting
Author : BeyazKurt Contact : [email protected] Script : Ppim v1.0 Bu ne bicim script adidir amk :D Download : http://scripts.ringsworld.com/organizers/ppim.zip D0rk : inurl:events.php?listallevents File Delete Vulnerability: upload.php...
Solaris <= 10 LPD Arbitrary File Delete Exploit (metasploit)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
CVE-2008-2674: Undefined Security Weakness
Unspecified vulnerability in the Interstage Management Console, as used in Fujitsu Interstage Application Server 6.0 through 9.0.0A, Apworks Modelers-J 6.0 through 7.0, and Studio 8.0.1 and 9.0.0, allows remote attackers to read or delete arbitrary files via unspecified vectors...
CVE-2008-2403: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages ASP Server before 4.0.3 allow remote attackers to read or delete arbitrary files via a .. dot dot in the Path parameter to the MapPath method...
HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Delete
HP Instant Support 1.0.22 - HPISDataManager.dll ActiveX Control Arbitrary File Delete source: https://www.securityfocus.com/bid/29536/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in th...
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Delete
source: https://www.securityfocus.com/bid/29536/info HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the application using the ActiveX control. Successful attacks can result ...
LokiCMS <= 0.3.3 Arbitrary File Delete Vulnerability
No description provided by source. Name : LokiCMS 0.3.3 = Arbitrary File Delete Vulnerability Author : cOndemned Greetz : ZaBeaTy, GregStar, irk4z, doctor, Avantura ; Usage: http://target/lokiCMS/admin.php?delete=path/file PoC: http://target/lokiCMS/admin.php?delete=../includes/Config.php Deletin...
LokiCMS 0.3.3 - Arbitrary File Delete
LokiCMS 0.3.3 - Arbitrary File Delete Name : LokiCMS 0.3.3 = Arbitrary File Delete Vulnerability Author : cOndemned Greetz : ZaBeaTy, GregStar, irk4z, doctor, Avantura ; Usage: http://target/lokiCMS/admin.php?delete=path/file PoC: http://target/lokiCMS/admin.php?delete=../includes/Config.php...
lokicms-delete.txt
Name : LokiCMS 0.3.3 = Arbitrary File Delete Vulnerability Author : cOndemned Greetz : ZaBeaTy, GregStar, irk4z, doctor, Avantura ; Usage: http://target/lokiCMS/admin.php?delete=path/file PoC: http://target/lokiCMS/admin.php?delete=../includes/Config.php Deleting Config.php will casue situation...
LokiCMS <= 0.3.3 Arbitrary File Delete Vulnerability
Exploit for unknown platform in category web applications ==================================================== LokiCMS = 0.3.3 Arbitrary File Delete Vulnerability ==================================================== Name : LokiCMS 0.3.3 = Arbitrary File Delete Vulnerability Author : cOndemned...
LokiCMS 0.3.3 - Arbitrary File Delete
Name : LokiCMS 0.3.3 = Arbitrary File Delete Vulnerability Author : cOndemned Greetz : ZaBeaTy, GregStar, irk4z, doctor, Avantura ; Usage: http://target/lokiCMS/admin.php?delete=path/file PoC: http://target/lokiCMS/admin.php?delete=../includes/Config.php Deleting Config.php will casue situation...
CVE-2008-0194: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. dot dot in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php. NOTE: this might ...
CVE-2008-0091: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in download2.php in AGENCY4NET WEBFTP 1 allows remote attackers to read and delete arbitrary files via a .. dot dot in the file parameter...
CVE-2006-6376: Undefined Security Weakness
Multiple directory traversal vulnerabilities in fm.php in Simple File Manager SFM 0.24a allow remote attackers to use ".." sequences to 1 read arbitrary files via the filename parameter in a download action, 2 delete arbitrary files via the delete parameter, and 3 modify arbitrary files via the...
contentnow-130.txt
r0ut3r Presents... Another r0ut3r discovery! ContentNow 1.30 Local File Include & Arbitrary File Upload/Delete Vulnerabilities Software: ContentNow 1.30 Vulnerabilities Vendor: http://www.contentnow.mf4k.de/ Released: 2006/11/13 Discovered By: r0ut3r writ3r at gmail.com Criticality: Highly critic...
Solaris LPD Arbitrary File Delete
This module uses a vulnerability in the Solaris line printer daemon to delete arbitrary files on an affected system. This can be used to exploit the rpc.walld format string flaw, the missing krb5.conf authentication bypass, or simply delete system files. Tested on Solaris 2.6, 7, 8, 9, and 10. Th...
CVE-2006-0732: Undefined Security Weakness
Directory traversal vulnerability in SAP Business Connector BC 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to 1 sapbc/SAP/chopSAPLog.dsp or 2 invoke/sap.monitor.rfcTrace/deleteSingle. Details will be updated after the grace period has ended...
Solaris 10 LPD - Arbitrary File Delete (Metasploit)
Solaris 10 LPD - Arbitrary File Delete Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual...