CVE-2007-0538

CVE-2007-0538 affects Telligent Community Server (version 2.1 and earlier). The vulnerability allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls where the source URI is either a large file (triggering a long download session without a...

CVE-2007-0538

Telligent Community Server 2.1 and earlier allows remote attackers to cause a denial of service bandwidth or thread consumption via pingback service calls with a source URI that corresponds to 1 a large file, which triggers a long download session without a timeout constraint; or 2 a file with a...

DoS against Telligent Community Server

Advisory: DoS against Telligent Community Server Advisory ID: 4tphi-sa-20070111-communityserver Release Date: 01-24-2007 Author: Blake Matheny [email protected] Software: Community Server = 2.1 Impact: Remote DoS Overview: From Wikipedia, "Community Server is a community collaboration platfo...

ArsDigita Community System目录遍历漏洞

ArsDigita Community System是一款基于WEB的应用程序。 ArsDigita Community System不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是程序对用户提交URL参数缺少过滤，提交包含多个".%252e/"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 Ars Digita Community System ACS 3.4.10 Ars Digita Community System ACS 3.4.9 Ars Digita Community Education Solution...

Directory Traversal in ArsDigita Community System

SUMMARY ======= A directory traversal vulnerability exists in the Ars Digita Community System. A remote attacker could exploit this vulnerability to read arbitrary files with the permissions of the web server. AFFECTED SOFTWARE ================= Ars Digita Community System ACS 3.4.9, 3.4.10, and...

CVE-2007-0389

Directory traversal vulnerability in ArsDigita Community System ACS 3.4.10 and earlier, and ArsDigita Community Education Solution ACES 1.1, allows remote attackers to read arbitrary files via .%252e/ double-encoded dot dot slash sequences in the URI...

CVE-2007-0389

The CVE-2007-0389 issue affects ArsDigita Community System (ACS) 3.4.10 and earlier and ArsDigita Community Education Solution (ACES) 1.1. It is a directory traversal vulnerability that lets an attacker read arbitrary files by sending URIs containing double-encoded sequences like .%252e/. The pro...

ArsDigita Community System 3.4.x - Directory Traversal

ArsDigita Community System 3.4.x - Directory Traversal source: https://www.securityfocus.com/bid/22121/info ArsDigita Community System is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...

ArsDigita Community System 3.4.x - Directory Traversal

source: https://www.securityfocus.com/bid/22121/info ArsDigita Community System is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the conte...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to 1 Application Object Library APPS01, 2 Human Resources APPS03, 3 Payables APPS04, 4 Trading Community Architecture APPS05, and 5 Web Applications Desktop...

mpsw-rfi.txt

magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; commonfunction.php bug...

Magic Photo Storage Website _config[site_path] File Include Vuln

No description provided by source. magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg...

PHP-Nuke Book Catalog Module Upload.PHP任意文件上传漏洞

PHP-Nuke Book Catalog Module是一款PHP的图书目录模块。 PHP-Nuke Book Catalog Module不正确过滤用户提交的数据，远程攻击者可以利用漏洞上传任意文件，并以WEB进程执行。 'BookCatalog/upload.php'对用户提交的图象文件缺少正确过滤，可直接提交PHP文件而导致以WEB权限执行。 SAP Basis Community Book Catalog Module 1.0 目前没有解决方案提供,请关注以下链接： http://www.basisconsultant.com/index.php...

CliServ Web Community远程文件包含漏洞

CliServ Web Community是一款基于PHP的WEB应用程序。 CliServ Web Community不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的WEB参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 CliServ Web Community CliServ Web Community 0.65 http://sourceforge.net/projects/cliserv/ !/usr/bin/env python coding: utf-8 from...

Net-SNMP security protection bypass

Under some conditions write access may be obtained to read-only community...

CVE-2006-6369

SQL injection vulnerability in lib/entryreplyentry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality...

CVE-2006-6369

SQL injection vulnerability in lib/entryreplyentry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality...

CVE-2006-6369

CVE-2006-6369 is an SQL injection in the Invision Community Blog Mod 1.2.4. The flaw is in the file lib/entry_reply_entry.php and is exploitable via the eid parameter when the message is previewed, allowing remote attackers to execute arbitrary SQL commands. The connected documents provide the af...

Seir Anphin V666 Community Management System多个SQL注入漏洞

Seir Anphin Community Management System是一款基于PHP的社区程序。 Seir Anphin Community Management System不正确处理用户提交的WEB数据，远程攻击者可以利用漏洞进行SQL注入获得敏感信息。 问题存在于'index.php'脚本中，由于对用户提交的URI参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Seir Anphin Community Management System v666 http://www.comeplaydying.com/...

Invision Community Blog EID SQL注入漏洞

Invision Community Blog是一款基于Invision的一个日记模块。 Invision Community Blog不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是脚本对用户提交的'EID'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Community Blog 1.2.4 目前没有解决方案提供： http://www.invisionblog.com/...