Arbitrary file deletion and multiple XSS vulnerabilities in pfSense

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in web interface of pfSense, which can be exploited to perform Cross-Site Scripting XSS attacks against administrator of pfSense and delete arbitrary files via CSRF Cross-Site Request Forgery attacks. Successful exploitati...

KENT-WEB Joyful Note Arbitrary Code Execution Vulnerability

KENT-WEB Joyful Note is a suite of message board applications from the Japanese company KENT-WEB. A security vulnerability exists in KENT-WEB Joyful Note versions prior to 5.3. A remote attacker can exploit the vulnerability to delete or write arbitrary files and execute arbitrary code...

Unspecified Vulnerability in KENT-WEB Clip Board

KENT-WEB Clip Board is a set of forum applications from KENT-WEB Japan. An unspecified vulnerability exists in KENT-WEB Clip Board versions prior to 4.1. A remote attacker can exploit this vulnerability to delete arbitrary files...

KENT-WEB Clip Board vulnerability where arbitary files may be deleted

Overview Clip Board provided by KENT-WEB is a bulletin board software that allows users to upload binary files such as image files. KENT-WEB Clip Board contains a vulnerability that may allow a remote attacker to delete arbitrary files. Shoji Baba reported this vulnerability to IPA. JPCERT/CC...

Arbitrary file deletion

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on 1 controlprocess.pid or a 2 generation- file...

u5CMS 3.9.3 Arbitrary File Deletion

u5CMS 3.9.3 deletefile.php Arbitrary File Deletion Vulnerability Vendor: Stefan P. Minder Product web page: http://www.yuba.ch Affected version: 3.9.3 and 3.9.2 Summary: u5CMS is a little, handy Content Management System for medium-sized websites, conference / congress / submission...

u5CMS 3.9.3 - 'deletefile.php' Arbitrary File Deletion

u5CMS 3.9.3 deletefile.php Arbitrary File Deletion Vulnerability Vendor: Stefan P. Minder Product web page: http://www.yuba.ch Affected version: 3.9.3 and 3.9.2 Summary: u5CMS is a little, handy Content Management System for medium-sized websites, conference / congress / submission...

u5CMS 3.9.3 - deletefile.php Arbitrary File Deletion

u5CMS 3.9.3 - deletefile.php Arbitrary File Deletion u5CMS 3.9.3 deletefile.php Arbitrary File Deletion Vulnerability Vendor: Stefan P. Minder Product web page: http://www.yuba.ch Affected version: 3.9.3 and 3.9.2 Summary: u5CMS is a little, handy Content Management System for medium-sized...

u5CMS 3.9.3 (deletefile.php) Arbitrary File Deletion Vulnerability

Summary u5CMS is a little, handy Content Management System for medium-sized websites, conference / congress / submission administration, review processes, personalized serial mails, PayPal payments and online surveys based on PHP and MySQL and Apache. Description Input passed to the 'f' parameter...

ThinkSAAS最新版漏洞打包

简要描述： SQL注入+文件包含+... 向xfkxfk牛学习，多个漏洞打包，希望走一个大厂商流程。 详细说明： 最新版中tsUrlCheck函数引发了多个漏洞 \thinksaas\tsFunction.php function tsUrlCheck$parameter $parameter = trim$parameter; //echo $parameter;exit; $arrStr = strsplit$parameter; $strOk = '%-1234567890abcdefghijklmnopqrstuvwxyz'; foreach $arrStr as $key =...

vBulletin MicroCART 1.1.4 - Arbitrary Files Deletion / SQL Injection / Cross-Site Scripting

Exploit Title: vBulletin MicroCART 1.1.4 - Arbitrary Files Deletion, SQL Injection & XSS Date: January 8, 2015 Exploit Author: Technidev https://technidev.com Vendor Homepage: https://vbulletin.com Software Link: http://www.vbulletin.org/forum/showthread.php?t=256723 Version: 1.1.4 This plugin is...

vBulletin MicroCART 1.1.4 - Arbitrary Files Deletion SQL Injection Cross-Site Scripting

vBulletin MicroCART 1.1.4 - Arbitrary Files Deletion SQL Injection Cross-Site Scripting Exploit Title: vBulletin MicroCART 1.1.4 - Arbitrary Files Deletion, SQL Injection & XSS Date: January 8, 2015 Exploit Author: Technidev https://technidev.com Vendor Homepage: https://vbulletin.com Software...

vBulletin MicroCART 1.1.4 - Arbitrary File(s) Deletion, SQL Injection & XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: vBulletin MicroCART 1.1.4 - Arbitrary Files Deletion, SQL Injection & XSS Date: January 8, 2015 Exploit Author: Technidev https://technidev.com Vendor Homepage: https://vbulletin.com Software Link:...

Arbitrary file deletion

Facebook HipHop Virtual Machine HHVM before 3.1.0 does not drop supplemental group memberships within hphp/util/capability.cpp and hphp/util/light-process.cpp, which allows remote attackers to bypass intended access restrictions by leveraging group permissions for a file or directory...

YXCMS 1.2.6任意文件删除可Reinstall

简要描述： YXCMS 1.2.6任意文件删除 Reinstall 详细说明： 前人经验： http://wooyun.org/bugs/wooyun-2010-047226 产生漏洞文件： protected\apps\admin\controller\photoController.php protected\apps\member\controller\photoController.php 关键代码： if!empty$photos'photolist' $phoarr=explode',',$photos'photolist'; foreach $phoarr as $vo...

ManageEngine OpManager Social IT Plus IT360 - Multiple Vulnerabilities

ManageEngine OpManager Social IT Plus IT360 - Multiple Vulnerabilities Multiple vulnerabilities in ManageEngine OpManager, Social IT Plus and IT360 Discovered by Pedro Ribeiro [email protected], Agile Information Security ==========================================================================...

[The ManageOwnage Series, part V]: RCE / file upload / arbitrary file deletion in OpManager, Social IT and IT360

Hi, This is the fifth part of the ManageOwnage series. For previous parts, see: http://seclists.org/fulldisclosure/2014/Aug/55 http://seclists.org/fulldisclosure/2014/Aug/75 http://seclists.org/fulldisclosure/2014/Aug/88 http://seclists.org/fulldisclosure/2014/Sep/1 This time we have a file uploa...

Pimcore CMS 1.4.9 <2.1.0 - Multiple Vulnerabilities

Vulnerabilities in Pimcore 1.4.9 to 2.1.0 inclusive Discovered by Pedro Ribeiro [email protected] of Agile Information Security ==================================================================== Disclosure: 14/04/2014 / Last updated: 12/10/2014 Vulnerability: Remote code execution in Pimcore CMS...

FRHRCMS V3.0 /person/person_certificate.php 任意文件删除漏洞

No description provided by source...

YXCMS最新版绕过补丁继续任意文件删除

简要描述： YXCMS最新版绕过补丁继续任意文件删除 详细说明： 最早Matt牛在2013-12-30发的一个漏洞： WooYun: yxcms任意文件删除 导致的重新安装漏洞 厂商在2014-01-13发布了升级包，修改这个漏洞 但是处理的不严格，可以绕过，继续进行任意文件删除 看代码protected/apps/members/contoller/newscontroller.php if empty$FILES'picture''name' === false $tfile=date"Ymd"; $imgupload=...