5632 matches found
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution
No description provided by source. Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected]...
QNX RTOS 4.25 CRTTrap File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4901/info The QNX RTOS crttrap binary includes a command-line option for specifying a configuration file. crttrap is installed setuid by default. crttrap Local attackers may specify an arbitrary system file in place of th...
Address Book Script 1.09 - Local File Inclusion
No description provided by source. Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/addressbook.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...
Matt Kruse Calendar Script 2.2 Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/1215/info Matt Kruse's Calendar script is a popular, free perl cgi-script used by many websites on the Internet. It allows a website administrator to easily setup and customize a calendar on their website. There are two...
DM FileManager 3.9.4 - Remote File Disclosure Vulnerability
No description provided by source. + DM FileManager 3.9.4 Remote File Dislosure Vulnerability + Author : Stack + Greetz : V4 Team & Sec R1z + Download Script : http://www.dutchmonkey.com/?file=products/dm-filemanager/downloadresponse.html&download=direct + Xpl : +...
MyBlog 0.9.8 Multiple Remote Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30310/info MyBlog is prone to multiple information-disclosure vulnerabilities because the application fails to properly restrict access to sensitive files. An unprivileged attacker may exploit these issues to obtain...
KDE 1.1.2 KApplication configfile vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1291/info The KDE configuration-file management has a bug which could result in root compromise. Due to insecure creation of configuration rc files via KApplication-class, local users can modify ownership of arbitrary fil...
Fhimage 1.2.1 - Remote Index Change Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1...
MDaemon Mailer Daemon 11.0.1 - Remote File Disclosure
No description provided by source. MDaemon Mailer Daemon Version 11.0.1 LATEST Remote File Disclosure Bug Found & Exploited by Kingcope May 2010 The latest version at the time of this advisory is vulnerble to the attack. It seems all files which the SYSTEM account can read can be accessed remotel...
TightAuction 3.0 Config.INC Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5850/info TightAuction is prone to an information disclosure vulnerability. The configuration file config.inc contains sensitive information such as database authentication credentials. It is possible for remote attackers...
Fhimage 1.2.1 - Remote Command Execution Exploit (mq = off)
No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1...
Cisco DPC2420 Multiples Vulnerabilities
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - Title: DPC2420 Multiple vulnerabilities - Author: Facundo M. de la Cruz tty0 - E-mail: [email protected] =20 0x00 Details Vendor : Cisco Model : DPC2420 type : Cablemodem router.=20 Firmware:...
AutomatedShops WebC 2.0/5.0 Symbolic Link Following Configuration File Weakness
No description provided by source. source: http://www.securityfocus.com/bid/7272/info It has been reported that WebC will execute in the directory of a symbolic link from which it is invoked. Because of this, it may be possible for a local user to load a configuration file that enabled dangerous...
Working Resources 1.7.3 BadBlue Null Byte File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5226/info BadBlue is a P2P file sharing application distributed by Working Resources. It is available for Microsoft Windows operating systems. It has been discovered that a request passed to a BadBlue server containing a...
CDRDAO 1.1.x Home Directory Configuration File Symbolic Link Vulnerability (4)
No description provided by source...
PhpMyAdmin Config File Code Injection
漏洞位置在scripts/setup.php 1315行开始： case 'save': $config = @fopen'./config/config.inc.php', 'w'; //以写的方式打开 if $config === FALSE message'error', 'Could not open config file for writing! Bad permissions?'; break; $s = getcfgstring$configuration; //$configuration = unserialize$POST'configuration'; $r =...
Webfwlog <= 0.92 (debug.php) Remote File Disclosure Vulnerability
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + D.Script:ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/All/webfwlog-0.92.tbz + D.Scrpit:http://webfwlog.sourceforge.net/...
Frox 0.7.18 Arbitrary Configuration File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14711/info Frox is prone to a vulnerability that permits read access to arbitrary files. Successful exploitation of this vulnerability will grant the attacker read access to arbitrary files on the system in the security...
phpGB 1.1/1.2 PHP Code Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5679/info phpGB is subject to a PHP code injection vulnerability. After bypassing authentication it is possible to inject code into the guestbook configuration file config.php by supplying malicious parameters for the...
Simple Machine Forum 2.0.x < 2.0.4 File Disclosure/Path Traversal
No description provided by source. Exploit Title: SMF 2.0.4 File Disclosure/Path Traversal Google Dork: Powered by SMF 2.0.x Date: 02/02/2013 Exploit Author: NightlyDev Software Link: http://download.simplemachines.org/index.php?thanks;filename=smf2-0-3install.zip Version: 2.0.x 2.0.4 Tested on:...