QuickCart 3.x xss xsrf Local File Inclusion Directory Traversal

No description provided by source. DISCOVERED: Paweł 'kl3ryk' Łaskarzewski GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THIS FILE- Most of actions load templates form bad directory and then thr...

Xerver HTTP Server 4.32 - Remote Denial of Service

Xerver HTTP Server 4.32 - Remote Denial of Service Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application...

Xerver HTTP Server 4.32 Remote Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ============================================================== Xerver HTTP Server 4.32 Remote Denial of Service Vulnerability ============================================================== Xerver HTTP Server = v4.32 Remote Denial of Service Found...

[SECURITY] Fedora 11 Update: akonadi-1.2.1-1.fc11

PIM Storage Service. Requires an available instance of mysql server at runtime. Akonadi can spawn a per-user one automatically if the mysql-server package is installed on the machine. See also: /etc/akonadi/mysql-global.conf...

phpMyAdmin Installation Not Password Protected

The version of phpMyAdmin installed on the remote web server allows unrestricted, unauthenticated access. This is likely due to setting the 'authtype' to 'config' and storing login credentials in the configuration file. A remote attacker could exploit this to execute arbitrary SQL queries, delete...

CVE-2009-2334

wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as...

xscreensaver 5.01 - Arbitrary File Disclosure Symlink

xscreensaver 5.01 - Arbitrary File Disclosure Symlink xscreensaver local arbitrary file disclosure | symlink attack The �xscreensaver� program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on...

GLSA-200906-03 : phpMyAdmin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200906-03 phpMyAdmin: Multiple vulnerabilities Multiple vulnerabilities have been reported in phpMyAdmin: Greg Ose discovered that the setup script does not sanitize input properly, leading to the injection of arbitrary PHP code...

TorrentVolve 1.4 File Deletion

---------------------------------------------------------------------------------------------------- Name : Torrent Volve Site : http://sourceforge.net/projects/torrentvolve/ Down : http://sourceforge.net/project/showfiles.php?groupid=179905&packageid=207933&releaseid=476030...

Solaris Update for IKE config.sample 114125-01

Check for the Version of IKE config.sample OpenVAS Vulnerability Test Solaris Update for IKE config.sample 114125-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Flash Image Gallery 1.1 File Disclosure

0x01 Informations: Script : Flash Image Gallery 1.1 and maybe last version Download : http://www.flashimagegallery.com/download/fig116admin110.zip Vulnerability : Sensitive Data Disclosure Author : DarkbiteX Greets: : |OverclockiX| , |0oZeuzo0|, |Status-X|, |Fatal Inside|, |NaOnack|, |Good-Spide|...

SonicWALL Global VPN Client < 4.0.0.830 Format String Vulnerabilities

The version of the SonicWALL Global VPN Client software installed on the remote Windows host fails to sanitize the 'name' attribute of the 'Connection' tag and the content of the 'Hostname' tag in the configuration file of format strings. If an attacker can trick a user on the affected host into...

Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure

Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure 0x01 Informations: Script : Flash Image Gallery 1.1 and maybe last version Download : http://www.flashimagegallery.com/download/fig116admin110.zip Vulnerability : Sensitive Data Disclosure Author : DarkbiteX Greets: : |OverclockiX|...

Flash Image Gallery 1.1 - Arbitrary Configuration File Disclosure

0x01 Informations: Script : Flash Image Gallery 1.1 and maybe last version Download : http://www.flashimagegallery.com/download/fig116admin110.zip Vulnerability : Sensitive Data Disclosure Author : DarkbiteX Greets: : |OverclockiX| , |0oZeuzo0|, |Status-X|, |Fatal Inside|, |NaOnack|, |Good-Spide|...

NC LinkList 1.3.1 Remote Command Injection Exploit

No description provided by source. -------------------------------------------------------------- NC LinkList 1.3.1 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-linkverzeichnis.de Thank You Very Much...

EasyPHP 3.0 Arbitrary Modify Configuration File Vulnerability

No description provided by source. Bug : Arbitrary Modify Configuration File Vendor : EasyPHP Vendor URI : http://sourceforge.net/projects/quickeasyphp/ Product : EasyPHP 2.0 Author : Zigma zigmatn @ gmail.com http://NullArea.NET Description : EasyPHP is a WAMP software bundle that installs web...

EasyPHP 3.0 Arbitrary Modify Configuration File Vulnerability

Exploit for unknown platform in category local exploits ============================================================= EasyPHP 3.0 Arbitrary Modify Configuration File Vulnerability ============================================================= Bug : Arbitrary Modify Configuration File Vendor :...

EasyPHP 3.0 - Arbitrary Modify Configuration File

Bug : Arbitrary Modify Configuration File Vendor : EasyPHP Vendor URI : http://sourceforge.net/projects/quickeasyphp/ Product : EasyPHP 2.0 Author : Zigma zigmatn @ gmail.com http://NullArea.NET Description : EasyPHP is a WAMP software bundle that installs web server services onto the Windows...

Qt QuickTeam - Multiple Remote File Inclusions

Qt QuickTeam - Multiple Remote File Inclusions =-=-remote file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::quickteam 2 ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download...

Apache Web Server Configuration File Environment Variable Local Buffer Overflow Vulnerability

According to its version number, the remote version of Apache Web Server is prone to a local buffer-overflow vulnerability that affects a configuration file environment variable. This occurs because the application fails to validate user-supplied string lengths before copying them into finite...