AFU, AFD and XSS vulnerabilities in Uploadify

Hello 3APA3A! These are Arbitrary File Uploading, Arbitrary File Deletion and Cross-Site Scripting vulnerabilities in Uploadify. Particularly in the version used in aCMS it looks like these developers use modified version of Uploadify, but other developers also can use such version...

HP OpenView Communication Broker Arbitrary File Deletion (HPSBMU02691)

According to its self-reported version, the version of the HP OpenView Communication Broker service running on the remote host has a vulnerability that could allow an unauthenticated attacker to delete arbitrary files on the system. Successful exploits will result in a denial of service condition...

Uploadify 2.1.4 File Upload / XSS / File Deletion

Hello list! These are Arbitrary File Uploading, Arbitrary File Deletion and Cross-Site Scripting vulnerabilities in Uploadify. Particularly in the version used in aCMS it looks like these developers use modified version of Uploadify, but other developers also can use such version...

iwebsns1. 0 arbitrary file deletion&&2 injection-vulnerability warning-the black bar safety net

action\users\usericocutsave.action.php | 1 | ? php ---|--- 2 | //Introduction module public method file ---|--- 3 | require"foundation/moduleusers.php"; ---|--- 4 | require"foundation/aintegral.php"; ---|--- 5 | require"foundation/fcontentformat.php"; ---|--- 6 | require"api/basesupport.php";...

Sourcefire Defense Center Multiple Security Vulnerabilities

The remote host is a SourceFire Defense Center appliance. The remote version of this software is affected by the following vulnerabilities : - Two arbitrary file download vulnerabilities that allow an attacker to read arbitrary files on the remote file system. - An arbitrary file deletion...

Simplog multiple pieces of vulnerability analysis-vulnerability warning-the black bar safety net

Late night bored go find some CMS for mining vulnerability, listening to friends say simplog there are many vulnerabilities, that I also the next to see his program exactly how unsafe. Due to time problems yourself from the code analysis, and test that part of it is not written!!! Coming to the...

Tipask 2.0 前台任意文件删除漏洞

简要描述： tipask可以调整头像保存并删除原始头像 在删除原始头像时使用了post提交的参数 造成任意文件删除漏洞 详细说明： function onsaveimg $x1 = $this- post'x1' ; $y1 = $this- post'y1' ; $x2 = $this- post'x2' ; $y2 = $this- post'y2' ; $w = $this- post'w' ; $h = $this- post'h' ; $ext = $this- post'ext' ; $uploadtmpfile = TIPASKROOT . "/data/tmp/"...

Gallery < 3.0.5 Multiple Vulnerabilities

According to its version number, the Gallery install hosted on the remote web server is affected by multiple vulnerabilities : - The application is affected by a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input to the 'Module Name' field in the...

PHP-Fusion forum/viewthread.php highlight Parameter XSS

The version of PHP-Fusion installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input to the 'highlight' parameter of the 'forum/viewthread.php' script. An unauthenticated, remote attacker may be able to leverage this to inject...

Piwigo arbitrary file disclosure and arbitrary file deletion vulnerability-vulnerability warning-the black bar safety net

Piwigo is written in PHP photo album script. Piwigo 2.4.6, and other versions did not properly validate the install. php script 'dl'parameter value, in the realization on the presence of security vulnerabilities, an attacker can exploit these vulnerabilities to view on the affected computer of an...

Piwigo <= 2.4.6 Arbitrary File Disclosure and Arbitrary File Deletion Vulnerabilities

Piwigo is prone to an arbitrary file-disclosure vulnerability and an arbitrary file-deletion vulnerability because the application fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

Free Blog 1.0 - Multiple Vulnerabilities

Free Blog 1.0 Multiple Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/exploits/FreeBlog.txt Software Link: http://blog.sdnex.com/ Tested: Ubuntu 12.04.1 LTS Proof of concept: Arbitrary File Upload Vulnerability http://bastardlabs/blogpath/up.php Shell will be available...

Free Blog 1.0 Shell Upload / Arbitrary File Deletion

Free Blog 1.0 Multiple Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/exploits/FreeBlog.txt Software Link: http://blog.sdnex.com/ Tested: Ubuntu 12.04.1 LTS Proof of concept: Arbitrary File Upload Vulnerability http://bastardlabs/blogpath/up.php Shell will be available...

Free Blog 1.0 - Multiple Vulnerabilities

Free Blog 1.0 - Multiple Vulnerabilities Free Blog 1.0 Multiple Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/exploits/FreeBlog.txt Software Link: http://blog.sdnex.com/ Tested: Ubuntu 12.04.1 LTS Proof of concept: Arbitrary File Upload Vulnerability...

Free Blog 1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Free Blog 1.0 Multiple Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/exploits/FreeBlog.txt Software Link: http://blog.sdnex.com/ Tested: Ubuntu 12.04.1 LTS Proof of concept: Arbitrary File Upload Vulnerability...

Arbitrary file deletion

The 1 pcmd and 2 pmlogger init scripts in Performance Co-Pilot PCP before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/ temporary file...

Liferay Portal 6.1.0 / 6.1.10 Arbitrary File Deletion

According to its self-reported version, the installation of Liferay Portal hosted on the remote web server is affected by an arbitrary file deletion vulnerability. A user who has permission to delete an attachment in the Wiki portlet can delete any arbitrary file on the server. Note that Nessus h...

Arbitrary file deletion

ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ibacm daemon log or ibacm.port file...

DEBIAN-CVE-2012-2241

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted 1 .dsc or 2 .changes file, probably related to a NULL byte in a filename...

Webify Photo Gallery Arbitrary File Deletion

!x! Informations: Name : Webify photo gallery Download : http://webify.ws/photogallery Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM !x! Bug: Delete Arbitrary File Vulnerability you can...