FormCraft <= 2.0.5 - Arbitrary File Deletion

Successfully tested with v2.0.2...

U-mail一处SQL注入+任意文件删除

简要描述： U-mail一处SQL注入+任意文件删除 详细说明： oletterpaper.php 1.sql注入： if ACTION == "letterpaper-set" $url = makelink "option", "view", "letterpaper" ; $lpid = gss $POST'id' ; .... if $lpid $lpinfo = $Widget-getoneletterpaper "id=".$lpid, "", 0 ; 没啥好分析的，直接上exp...

YiDacms最新版漏洞大礼包

简要描述： YiDacms最新版漏洞大礼包 详细说明： 易达CMS 企业建站系统 当前最新版本是：YidaCms X3.2（20140718）版 这里我们主要看看后台比较严重的漏洞 关于xss和sql注入我们就不多讲了，后台的SQL注入很多都没有用全局过滤，导致sql注入 首先来看看第一处目录遍历，任意文件读取，拿shell： 文件/Yidacms/admin/adminfso.asp： ElseIf action = "Edit" then '读取文件 Dim FileAll FilePath = TrimRequest.Form"ThisDir" FileName =...

逐浪CMS 任意文件下载+任意文件删除（无需登录）

简要描述： 逐浪最新版 任意文件删除 任意文件下载 详细说明： 在此请求逐浪cms 重视每个白帽子提交的漏洞 不要老是漏洞忽略 地址 http://demo.zoomla.cn/USER/Develop%5CSiteAdmin/BackupSite.aspx 源码如下 protected void PageLoadobject sender, EventArgs e this.MU = this.BU.GetLogin; if base.Request.QueryString"status" == "del" //任意文件删除...

Ecmall 前台任意文件删除

简要描述： 删除lock之后可以重装系统 然后连接上自己搭建的mysql环境 重装后 。。。。然后就各种操作。 20140618 详细说明： 在app/mygoods.app.php中 function dropimage $id = empty$GET'id' ? 0 : intval$GET'id'; $uploadedfile = $this-uploadedfilemod-getarray 'conditions' = "f.fileid = '$id' AND f.storeid = '$this-storeid'", 'join' = 'belongstogoodsimage...

S.u.S.E. Linux 6.x Arbitrary File Deletion Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1130/info A vulnerability exists in SuSE Linux, version 6.3 and prior, that can allow arbitrary users to delete any file on the system. If the MAXDAYSINTMP variable is set in /etc/rc.config to be larger than 0, any local...

CA eSCC r8/1.0,eTrust Audit r8/1.5 Unspecified Arbitrary File Manipulation

No description provided by source. source: http://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These...

SAP Business Connector 4.6/4.7 chopSAPLog.dsp fullName Variable Arbitrary File Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/16668/info SAP Business Connector is prone to a file-access/deletion vulnerability. This issue arises due to an access-validation error. A successful attack will result in the disclosure of sensitive or privileged...

Tugux CMS 1.2 (pid) Arbitrary File Deletion Vulnerability

No description provided by source. Tugux CMS 1.2 pid Remote Arbitrary File Deletion Vulnerability Vendor: Tugux Studios Product web page: http://www.tugux.com Affected version: 1.2 Summary: Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web...

CA eSCC r8/1.0,eTrust Audit r8/1.5 Audit Event System Unspecified Replay Attack

No description provided by source. source: http://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These...

Webify Photo Gallery Arbitrary File Deletion Vulnerability

No description provided by source. !x! Informations: Name : Webify photo gallery Download : http://webify.ws/photogallery Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM !x! Bug: Delete...

Webify Blog Arbitrary File Deletion Vulnerability

No description provided by source. !x! Informations: Name : Webify Blog Download : http://www.webify.ws/blog Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Delete Arbitrary Fil...

YaBB SE 1.5.x Arbitrary File Deletion

No description provided by source. source: http://www.securityfocus.com/bid/9774/info It has been reported that YaBB SE may be prone to multiple vulnerabilities due to improper input validation. The issues may allow an attacker to carry out SQL injection and directory traversal attacks. Successfu...

asg-sentry <= 7.0.0 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: ASG-Sentry http://www.asg-sentry.com Versions: = 7.0.0 Platforms: Windows and Unix Bugs: A arbitrary files deleting B heap-overflow in FxAgent C termination of FxIAList D buffer-overflow in FxIAList Exploitation: remote Date: 10 Mar...

WorldClient 5.0.x Arbitrary File Deletion Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4687/info WorldClient is a web interface packaged with MDaemon, an email server for Microsoft Windows. An input validation vulnerability exists in WorldClient that allows for an attacker to delete an arbitrary file on the...

Pegasus Imaging ThumbnailXpress 1.0 - Remote Arbitrary File Deletion

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbolbody bgcolor=E0E0E0----------------------------------------------------------------------------- bPegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion/b url:...

MobileCartly 1.0 Arbitrary File Deletion Vulnerability

No description provided by source. Exploit Title: MobileCartly 1.0 = Arbitrary Delete Vulnerability Date: 09/08/2012 Author: GoLdM Vendor or Software Link: http://mobilecartly.com/mobilecartly.zip Version: 1.0 Category:: Arbitrary Delete Vulnerability Google dork: : Tested on: Xp SP 2 Ex :...

PlatinumFTPServer 1.0.6 Arbitrary File Deletion Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6493/info It has been reported that PlatinumFTPserver fails to properly sanitize some FTP commands. By sending a malicious request to the vulnerable server, using directory traversal sequences, it is possible for a remote...

NULL NUKE CMS 2.2 - Multiple Vulnerabilities

No description provided by source. ? NULL NUKE CMS v2.2 Multiple Vulnerabilities Vendor: nullwanton Product web page: http://sourceforge.net/projects/nullnuke/ Affected version: 2.2 and 2.1 rc3 Summary: NULL-8x3-NUKE is a fast, powerful and secure cross platform CMS for windows and Linux using ba...

Motorola Timbuktu Pro 8.6.3 .1367 Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25453/info Motorola Timbuktu Pro is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to delete or create arbitrar...