4727 matches found
Chamilo 1.8.7 / Dokeos 1.8.6 - Remote File Disclosure
No description provided by source. Title: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure Date: 2011/01/31 Author: beford Software Link: http://www.dokeos.com/download/dokeos-1.8.6.1.zip http://chamilo.googlecode.com/files/chamilo-1.8.7.1-stable.tar.gz Affected products ================= Doke...
Cisco DPC2420 Multiples Vulnerabilities
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - Title: DPC2420 Multiple vulnerabilities - Author: Facundo M. de la Cruz tty0 - E-mail: [email protected] =20 0x00 Details Vendor : Cisco Model : DPC2420 type : Cablemodem router.=20 Firmware:...
Matt Kruse Calendar Script 2.2 Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/1215/info Matt Kruse's Calendar script is a popular, free perl cgi-script used by many websites on the Internet. It allows a website administrator to easily setup and customize a calendar on their website. There are two...
Super Guestbook 1.0 Sensitive Information Disclosure Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7319/info Super Guestbook has been reported prone to a sensitive information disclosure weakness. An attacker may disclose sensitive information regarding the Super Guestbook install by sending a HTTP request for a Guest...
Simple Machine Forum 2.0.x < 2.0.4 File Disclosure/Path Traversal
No description provided by source. Exploit Title: SMF 2.0.4 File Disclosure/Path Traversal Google Dork: Powered by SMF 2.0.x Date: 02/02/2013 Exploit Author: NightlyDev Software Link: http://download.simplemachines.org/index.php?thanks;filename=smf2-0-3install.zip Version: 2.0.x 2.0.4 Tested on:...
Joe Text Editor 2.8 .joerc Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2437/info Joe is a text editor originally written by Joseph Allen. Joe offers a user-friendly interface, with key binding and configuration familiar to many users of Microsoft Word Processing tools. A problem in the...
CDRDAO 1.1.x Home Directory Configuration File Symbolic Link Vulnerability (4)
No description provided by source...
QNX RTOS 4.25 CRTTrap File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4901/info The QNX RTOS crttrap binary includes a command-line option for specifying a configuration file. crttrap is installed setuid by default. crttrap Local attackers may specify an arbitrary system file in place of th...
Address Book Script 1.09 - Local File Inclusion
No description provided by source. Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/addressbook.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...
Fhimage 1.2.1 - Remote Command Execution Exploit (mq = off)
No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1...
KDE 1.1.2 KApplication configfile vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1291/info The KDE configuration-file management has a bug which could result in root compromise. Due to insecure creation of configuration rc files via KApplication-class, local users can modify ownership of arbitrary fil...
MDaemon Mailer Daemon 11.0.1 - Remote File Disclosure
No description provided by source. MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can be accessed remotel...
PhpMyAdmin Config File Code Injection
漏洞位置在scripts/setup.php 1315行开始： case 'save': $config = @fopen'./config/config.inc.php', 'w'; //以写的方式打开 if $config === FALSE message'error', 'Could not open config file for writing! Bad permissions?'; break; $s = getcfgstring$configuration; //$configuration = unserialize$POST'configuration'; $r =...
DM FileManager 3.9.4 - Remote File Disclosure Vulnerability
No description provided by source. + DM FileManager 3.9.4 Remote File Dislosure Vulnerability + Author : Stack + Greetz : V4 Team & Sec R1z + Download Script : http://www.dutchmonkey.com/?file=products/dm-filemanager/downloadresponse.html&download=direct + Xpl : +...
phpGB 1.1/1.2 PHP Code Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5679/info phpGB is subject to a PHP code injection vulnerability. After bypassing authentication it is possible to inject code into the guestbook configuration file config.php by supplying malicious parameters for the...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution
No description provided by source. Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected]...
Fhimage 1.2.1 - Remote Index Change Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1...
Static HTTP Server 1.0 - SEH Overflow
No description provided by source. !/usr/bin/env python import os TitleStatic HTTP Server SEH Overflow - HTTP Config - httptiplist Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy, Security Analyst @ Independent Security Evaluators...
openSUSE Security Update : chromium (openSUSE-SU-2013:0236-1)
Update to 26.0.1383 - Security fixes bnc798326 - CVE-2012-5145: Use-after-free in SVG layout - CVE-2012-5146: Same origin policy bypass with malformed URL - CVE-2012-5147: Use-after-free in DOM handling - CVE-2012-5148: Missing filename sanitization in hyphenation support - CVE-2012-5149: Integer...
PHPYUN cloud talent system background CSRF Getshell-a vulnerability warning-the black bar safety net
phpyun background no authentication token, by the CSRF directly getshell First, from the background getshell start. The web site's configuration file,/plus/config.php using double quotes to do the key value, which leads to security issues. We can put php code to write into the double quotes insid...