OpenEMR - Arbitrary '.PHP' File Upload (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "OpenEMR PHP File...

[SECURITY] [DSA 2591-1] mahara security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2591-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 27, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2591-1] mahara security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2591-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 27, 2012 http://www.debian.org/security/faq -...

DSA-2591-1 mahara - several

Bulletin has no description...

Multiple vulnerabilities in Samsung Kies

Advisory ID: HTB23099 Product: Samsung Kies Vendor: Samsung Electronics Vulnerable Versions: 2.3.2.1205420 and probably prior Tested Version: 2.3.2.1205420 Vendor Notification: June 25, 2012 Public Disclosure: October 15, 2012 Vulnerability Type: NULL Pointer Dereference CWE-476, Improper Access...

Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities

Samsung Kies 2.3.2.1205420 - Multiple Vulnerabilities Advisory ID: HTB23099 Product: Samsung Kies Vendor: Samsung Electronics Vulnerable Versions: 2.3.2.1205420 and probably prior Tested Version: 2.3.2.1205420 Vendor Notification: June 25, 2012 Public Disclosure: October 15, 2012 Vulnerability...

CVE-2012-5386: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in phpPaleo 4.8b180 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the phppaleo4lang cookie, a different vulnerability than CVE-2012-1671. NOTE: the provenance of this information is unknown; the details are...

CVE-2011-5141: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in exportcsv/exportcsvindex.php in Open Business Management OBM 2.4.0-rc13 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the module parameter in an exportpage action...

CVE-2012-2208: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

PT-2012-5281

Name of the Vulnerable Software and Affected Versions MySQLDumper version 1.24.4 Description The issue allows remote attackers to read arbitrary files or execute arbitrary local files due to multiple directory traversal vulnerabilities. This can be achieved by including a .. dot dot in specific...

CVE-2012-4253: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

CVE-2012-4143: Improper Control of Generation of Code

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924...

PT-2012-5188

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.01 on Windows and UNIX Opera versions prior to 11.66 and 12.x prior to 12.01 on Mac OS X Description The issue allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a...

PT-2012-4170

Name of the Vulnerable Software and Affected Versions Collabtive versions prior to 0.7.6 Description The issue allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions. This is achieved by uploading an avatar file with an accepted...

CVE-2012-1925: Undefined Security Weakness

Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into downloading and executing arbitrary files via a download dialog located under other windows...

CVE-2012-1924: Improper Control of Generation of Code

Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog...

CVE-2012-1839: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXPClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pluginName or 2 pluginPath...

CVE-2012-0998: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and execute arbitrary files via a .. dot dot in the language parameter...

PT-2012-3003

Name of the Vulnerable Software and Affected Versions LEPTON versions prior to 1.1.4 Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary files. This is achieved by using a .. dot dot in the language parameter of the account/preferences.php...

PT-2012-3038

Name of the Vulnerable Software and Affected Versions Cyberoam Central Console versions 2.00.2 Description A directory traversal issue exists in the WWWHELP Service, specifically in the js/html/wwhelp.htm file, allowing remote attackers to include and execute arbitrary local files. This is achiev...