CVE-2010-5099

The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file types, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files, as...

CVE-2009-3897

CVE-2009-3897 affects Dovecot 1.2.x before 1.2.8, where during installation the base_dir-related directories (and possibly the base_dir itself) are created with mode 0777. This permits a local attacker to access or replace the authentication socket and potentially access arbitrary user accounts. ...

GNOME glib符号链接任意文件访问漏洞

Bugraq ID: 36313 GLib是一款GTK+和GNOME工程的基础底层核心程序库，是综合用途的轻量级的C程序库。 GNOME glib存在竞争条件问题，可导致任意文件访问或覆盖系统文件。 1，针对想要更改权限的文件或文件夹建立一个符号链接touch /testfile && ln -s /testfile /testlink。 2，使用Nautilus拷贝符号链接到任意地方ctrl+c && ctrl+v。 3，检查符号连接的文件或文件夹的权限。 结果可导致符号连接的文件或文件夹的权限已更改为777drwxrwxrwx user:user。 GNOME glib 2.16.4...

SourceBans 1.4.2 - Arbitrary Change Admin Email

Sourcebans PHP sb-callback.php Author: Mr. Anonymous ------ Vendor:http://www.sourcebans.com Affected Versions: Execute"UPDATE ".DBPREFIX."admins SET email = '".$email."' WHERE aid = '".$aid."'"; $objResponse-addScript"ShowBox'E-mail address changed', 'Your E-mail address has been changed...

Femitter FTP Server 1.x Multiple Vulnerabilities (post auth)

Exploit for windows platform in category remote exploits ============================================================ Femitter FTP Server 1.x Multiple Vulnerabilities post auth ============================================================ / Femitter Server FTP 1.x Multiple Vulnerability...

DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal

Title ----- DDIVRT-DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal Severity -------- High Date Discovered --------------- October 2, 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey LeBleu and r@b13$ Vulnerability...

FreeBSD Ports: nap

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SunShop <= 4.1.4 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== SunShop queryfirst"SELECT FROM ".$dbprefix."usersr...

Internet Photoshow (Special Edition) Insecure Cookie Handling Vuln

No description provided by source. --==+================================================================================+==-- --==+ Internet Photoshow Special Edition Insecure Cookie Handling +==-- --==+================================================================================+==-- Discover...

ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability

ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-069.html November 26, 2007 -- CVE ID: CVE-2007-5328 -- Affected Vendor: Computer Associates -- Affected Products: BrightStor ARCserve Backup r11.5...

Apple Quicktime for Java 7 Memory Access

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

CVE-2006-6814

Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and modify arbitrary files, and list arbitrary directories via ..\ dot dot backslash sequences in the BrowsePath parameter...

CVE-2006-2041

PhpWebGallery before 1.6.0RC1 allows remote attackers to obtain arbitrary pictures via a request to picture.php without specifying the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2041

PhpWebGallery before 1.6.0RC1 allows remote attackers to obtain arbitrary pictures via a request to picture.php without specifying the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

FarsiNews <= 2.5 Directory Traversal Arbitrary (users.db) Access Exploit

Exploit for unknown platform in category web applications ======================================================================== FarsiNews | \ | / \ / / / / / / Iran Hackerz Security Team Description Name : FarsiNews version : 2.5Pro in FarsiNews if you change the archive value :...

Farsinews 2.5 - Directory Traversal Arbitrary &#039;users.db&#039; Access

!/usr/bin/perl FarsiNews 2.5pro Show User&Passowrd Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Description Name : FarsiNews www.farsinewsteam.com version : 2.5Pro in FarsiNews if...

CherryPy < 2.1.1 staticfilter Directory Traversal Arbitrary File Access

Binary data 3442.prm...

glFTPd Multiple Script ZIP File Handling Arbitrary File / Directory Access

The remote glFTPD server fails to properly sanitize user-supplied input to the 'sitenfo.sh', 'sitezpichk.sh', and 'siteziplist.sh'. An attacker could exploit this flaw to disclose arbitrary files by sending a spcially crafted request to the remote host. C Tenable Network Security, Inc...

PHP-Fusion viewthread.php Arbitrary Thread Access

Binary data 2598.prm...

Bugs fixed in Version 1.4.3

In-Reply-To: [email protected] B. Unspecified File Download Vulnerability B1. An error in the MyDMS software allows to a registered users and only to registered users to download any file, such as /etc/passwd, by inserting in a parameter a text such as...