4930 matches found
Microweber 0.8 Arbitrary File Deletion
Advisory ID: HTB23175 Product: Microweber Vendor: Microweber Vulnerable Versions: 0.8 and probably prior Tested Version: 0.8 Advisory Publication: September 25, 2013 without technical details Vendor Notification: September 25, 2013 Vendor Patch: September 26, 2013 Public Disclosure: October 16,...
AFU, AFD and XSS vulnerabilities in Uploadify
Hello 3APA3A! These are Arbitrary File Uploading, Arbitrary File Deletion and Cross-Site Scripting vulnerabilities in Uploadify. Particularly in the version used in aCMS it looks like these developers use modified version of Uploadify, but other developers also can use such version...
HP OpenView Communication Broker Arbitrary File Deletion (HPSBMU02691)
According to its self-reported version, the version of the HP OpenView Communication Broker service running on the remote host has a vulnerability that could allow an unauthenticated attacker to delete arbitrary files on the system. Successful exploits will result in a denial of service condition...
Uploadify 2.1.4 File Upload / XSS / File Deletion
Hello list! These are Arbitrary File Uploading, Arbitrary File Deletion and Cross-Site Scripting vulnerabilities in Uploadify. Particularly in the version used in aCMS it looks like these developers use modified version of Uploadify, but other developers also can use such version...
iwebsns1. 0 arbitrary file deletion&&2 injection-vulnerability warning-the black bar safety net
action\users\usericocutsave.action.php | 1 | ? php ---|--- 2 | //Introduction module public method file ---|--- 3 | require"foundation/moduleusers.php"; ---|--- 4 | require"foundation/aintegral.php"; ---|--- 5 | require"foundation/fcontentformat.php"; ---|--- 6 | require"api/basesupport.php";...
Sourcefire Defense Center Multiple Security Vulnerabilities
The remote host is a SourceFire Defense Center appliance. The remote version of this software is affected by the following vulnerabilities : - Two arbitrary file download vulnerabilities that allow an attacker to read arbitrary files on the remote file system. - An arbitrary file deletion...
Simplog multiple pieces of vulnerability analysis-vulnerability warning-the black bar safety net
Late night bored go find some CMS for mining vulnerability, listening to friends say simplog there are many vulnerabilities, that I also the next to see his program exactly how unsafe. Due to time problems yourself from the code analysis, and test that part of it is not written!!! Coming to the...
Tipask 2.0 前台任意文件删除漏洞
简要描述： tipask可以调整头像保存并删除原始头像 在删除原始头像时使用了post提交的参数 造成任意文件删除漏洞 详细说明： function onsaveimg $x1 = $this- post'x1' ; $y1 = $this- post'y1' ; $x2 = $this- post'x2' ; $y2 = $this- post'y2' ; $w = $this- post'w' ; $h = $this- post'h' ; $ext = $this- post'ext' ; $uploadtmpfile = TIPASKROOT . "/data/tmp/"...
Gallery < 3.0.5 Multiple Vulnerabilities
According to its version number, the Gallery install hosted on the remote web server is affected by multiple vulnerabilities : - The application is affected by a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input to the 'Module Name' field in the...
PHP-Fusion forum/viewthread.php highlight Parameter XSS
The version of PHP-Fusion installed on the remote host is affected by a cross-site scripting vulnerability because it fails to properly sanitize user input to the 'highlight' parameter of the 'forum/viewthread.php' script. An unauthenticated, remote attacker may be able to leverage this to inject...
Piwigo arbitrary file disclosure and arbitrary file deletion vulnerability-vulnerability warning-the black bar safety net
Piwigo is written in PHP photo album script. Piwigo 2.4.6, and other versions did not properly validate the install. php script 'dl'parameter value, in the realization on the presence of security vulnerabilities, an attacker can exploit these vulnerabilities to view on the affected computer of an...
Piwigo <= 2.4.6 Arbitrary File Disclosure and Arbitrary File Deletion Vulnerabilities
Piwigo is prone to an arbitrary file-disclosure vulnerability and an arbitrary file-deletion vulnerability because the application fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
Free Blog 1.0 - Multiple Vulnerabilities
Free Blog 1.0 Multiple Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/exploits/FreeBlog.txt Software Link: http://blog.sdnex.com/ Tested: Ubuntu 12.04.1 LTS Proof of concept: Arbitrary File Upload Vulnerability http://bastardlabs/blogpath/up.php Shell will be available...
Free Blog 1.0 Shell Upload / Arbitrary File Deletion
Free Blog 1.0 Multiple Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/exploits/FreeBlog.txt Software Link: http://blog.sdnex.com/ Tested: Ubuntu 12.04.1 LTS Proof of concept: Arbitrary File Upload Vulnerability http://bastardlabs/blogpath/up.php Shell will be available...
Free Blog 1.0 - Multiple Vulnerabilities
Free Blog 1.0 - Multiple Vulnerabilities Free Blog 1.0 Multiple Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/exploits/FreeBlog.txt Software Link: http://blog.sdnex.com/ Tested: Ubuntu 12.04.1 LTS Proof of concept: Arbitrary File Upload Vulnerability...
Free Blog 1.0 Multiple Vulnerabilities
Exploit for php platform in category web applications Free Blog 1.0 Multiple Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/exploits/FreeBlog.txt Software Link: http://blog.sdnex.com/ Tested: Ubuntu 12.04.1 LTS Proof of concept: Arbitrary File Upload Vulnerability...
Arbitrary file deletion
The 1 pcmd and 2 pmlogger init scripts in Performance Co-Pilot PCP before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/ temporary file...
Liferay Portal 6.1.0 / 6.1.10 Arbitrary File Deletion
According to its self-reported version, the installation of Liferay Portal hosted on the remote web server is affected by an arbitrary file deletion vulnerability. A user who has permission to delete an attachment in the Wiki portlet can delete any arbitrary file on the server. Note that Nessus h...
