Quick Poll Local File Include and Arbitrary File Deletion Vulnerabilities

Quick Poll is prone to a local file-include vulnerability and an arbitrary-file- deletion vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

phpcms 2 0 0 8 sp4 explosive paths and arbitrary file deletion vulnerabilities and fixes-vulnerability warning-the black bar safety net

phpcms 2 0 0 8 sp4 explosive paths and arbitrary file deletion vulnerability and fix Affected versions: phpcms 2 0 0 8 sp4 Official address: www.phpcms.cn Vulnerability type: explosive paths and arbitrary file deletion Vulnerability Description: a certain page, not as fault-tolerant processing...

Arbitrary file deletion

A certain ActiveX control in ienipp.ocx in the browser plugin in Novell iPrint Client before 5.42 does not properly restrict the set of files to be deleted, which allows remote attackers to cause a denial of service recursive file deletion via unspecified vectors related to a "logic flaw" in the...

TitanFtp Server 8.10.1125 Arbitrary File Download / Delete

Accensus Security Advisory L-01 TitanFtp Server Arbitrary File Download/Delete Details ============= Product: TitanFTPd Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...

Arbitrary file deletion

emesenelib/ProfileManager.py in emesene before 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on the emsnpic temporary file...

Arbitrary file deletion

transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/...

phpcms2008sp4_UTF8_100510 网站管理系统信息泄露以及任意删除文件漏洞

No description provided by source. 注册普通会员账号 提交 http://www.wavdb.com/corpandresize/ui.php?http://www.wavdb.com/uploadfile/2010/0524/20100524094447855.jpg 并查看cookie信息，将会发现路径信息，并且可进行任意文件删除操作...

Axon Virtual PBX 2.13 Multiple Remote Vulnerabilities

NCH Software Axon virtual PBX is prone to multiple remote vulnerabilities, including: - A cross-site scripting vulnerability. - A cross-site request forgery vulnerability. - An arbitrary file deletion vulnerability. - A directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG...

Fixed in Apache Tomcat 6.0.24

Note: These issues were fixed in Apache Tomcat 6.0.21 but the release votes for the 6.0.21, 6.0.22 and 6.0.23 release candidates did not pass. Therefore, although users must download 6.0.24 to obtain a version that includes fixes for these issues, versions 6.0.21 onwards are not included in the...

Vulnerabilities in plugins for WordPress

Hello Bugtraq! I want to tell you about different vulnerabilities in plugins for WordPress. About some of them there were posts to the list earlier. This August I made a summary about all vulnerabilities in plugins for WordPress http://websecurity.com.ua/3397/, which I found during 2006-2009. In...

WordPress DM Albums插件任意文件删除漏洞

BUGTRAQ ID: 36799 DM Albums是在WordPress论坛中所使用的相册插件。 DM Albums插件中存在多个输入验证和访问验证错误，远程攻击者可以绕过安全限制或执行跨站脚本攻击。 1 由于没有正确地限制对dm-albums/wp-dm-albums-ajax.php脚本的访问，远程攻击者可以通过直接调用该脚本删除相册文件夹。 2 由于没有正确地过滤对dm-albums/wp-dm-albums-ajax.php所提交的deletealbum参数，远程攻击者可以利用目录遍历攻击删除相册根目录以外的文件夹。以下是有漏洞的代码段：...

TorrentVolve archive.php XSS Vulnerability

This host is running TorrentVolve and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodtorrentvolvexssvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ TorrentVolve archive.php XSS Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

Podcast Generator 'core/admin/delete.php' Arbitrary File Deletion Vulnerability

Podcast Generator is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the webserver. Successful attacks may aid in launching further attacks. Podcast Generator 1.1 is vulnerable; prior versions may also be affected. OpenVAS Vulnerabili...

Podcast Generator <= 1.1 Arbitrary File Deletion Vulnerability

Podcast Generator is prone to a vulnerability that lets attackers delete arbitrary files on the affected computer in the context of the webserver. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

OpenX 2.6.4 multiple vulnerabilities

OpenX multiple vulnerabilities An advisory by EnableSecurity in collaboration with Acunetix. Advisory URL: http://resources.enablesecurity.com/advisories/openx-2.6.4-multiple.txt Version: OpenX 2.6.4 and older versions Description: OpenX is an online advertising web application written in PHP tha...

OpenX SQL Injection / XSS / File Deletion

OpenX multiple vulnerabilities An advisory by EnableSecurity in collaboration with Acunetix. Advisory URL: http://resources.enablesecurity.com/advisories/openx-2.6.4-multiple.txt Version: OpenX 2.6.4 and older versions Description: OpenX is an online advertising web application written in PHP tha...

Orbit Downloader 2.8.7 Arbitrary File Deletion Vulnerability

No description provided by source. waraxe-2009-SA073 - Arbitrary File Deletion in Orbit Downloader = 2.8.7 =============================================================================== Author: Janek Vind "waraxe" Date: 21. March 2009 Location: Estonia, Tartu Web:...

Orbit Downloader 2.8.7 Arbitrary File Deletion Vulnerability

Exploit for unknown platform in category remote exploits ============================================================ Orbit Downloader 2.8.7 Arbitrary File Deletion Vulnerability ============================================================ waraxe-2009-SA073 - Arbitrary File Deletion in Orbit...

Orbit Downloader 2.8.7 - Arbitrary File Deletion

waraxe-2009-SA073 - Arbitrary File Deletion in Orbit Downloader Orbit Downloader = 2.8.7 Arbitrary File Deletion PoC by waraxe function test waraxe.download'','','" /Lc:\test.txt "','',1; /s...

Pivot 1.40.6 Remote Arbitrary File Deletion Vulnerability

No description provided by source. Pivot 1.40.6 Remote File Delete Alfons Luja Vuln : extensions/bbclonetools/hrconf.php line 20 ... $bbclonedebug = false; //is never change ... ========================================================= extensions/bbclonetools/count.php ... if $GET"refkey"!="" &&...