ReloadCMS 1.2 Cross Site Scripting

====================================================================== ReloadCMS 1.2. Xss Exploit + view directories and write permissions ====================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

[SECURITY] Fedora 10 Update: viewvc-1.0.9-1.fc10

ViewVC is a browser interface for CVS and Subversion version control repositories. It generates templatized HTML to present navigable directory, revision, and change log listings. It can display specific versions of files as well as diffs between those versions. Basically, ViewVC provides the bul...

NcFTPd <= 2.8.5 Remote Jail Breakout Vulnerability

No description provided by source. NcFTPd = 2.8.5 remote jail breakout Discovered by: Kingcope Contact: kcope2atgooglemail.com / http://isowarez.de Date: 27th July 2009 Greetings: Alex,Andi,Adize,wY!,Netspy,Revoguard Prerequisites: Valid user account. Demonstration on FreeBSD 7.0-RELEASE and NcFT...

CVE-2009-2544

Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live MPL allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. dot dot in a pathname...

Directory traversal

Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live MPL allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. dot dot in a pathname...

AN Guestbook Local File Inclusion Vulnerability

This host is running AN Guestbook and is prone to Local File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbanguestbooklfivuln.nasl 4865 2016-12-28 16:16:43Z teissa $ AN Guestbook Local File Inclusion Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH...

CVE-2009-2265

Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009,...

Directory traversal

Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to list arbitrary directories via a .. dot dot in the nextpage parameter...

Sun OpenSolaris 'smbfs(7FS)'本地信息泄漏漏洞

Bugraq ID: 35306 CNCAN ID：CNCAN-2009061202 Sun OpenSolaris是一款unix操作系统。 Sun OpenSolaris 'smbfs7FS'使用默认挂接权限时存在信息泄漏问题，本地非特权攻击者可以利用漏洞未授权访问读取CIFS挂接卷上的文件内容和目录列表。 目前没有详细漏洞细节提供。 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris...

httpdx 0.8 - FTP Server DeleteGetCreate DirectoriesFiles

httpdx 0.8 - FTP Server DeleteGetCreate DirectoriesFiles / Httpdx Server FTP v0.8 Remote Arbitrary Directories & files Vulnerability ------------------------------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when...

HP-UX Update for useradd(1M) HPSBUX02366

Check for the Version of useradd1M OpenVAS Vulnerability Test HP-UX Update for useradd1M HPSBUX02366 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora 10 : jetty-5.1.15-3.fc10 (2009-5513)

This bug upgrades jetty to 5.1.15 which addresses CVE-2009-1523. Wed Feb 11 2009 Jeff Johnston 5.1.14-1.10 - Rename jettyc back to .jettyrc. - Resolves 485012 Tue Feb 03 2009 Jeff Johnston 5.1.14-1.9 - Change %%sysconfdir/init.d references to be %%initrddir - Resolves 473585 Mon Feb 02 2009 Jeff...

Directory traversal

Directory traversal vulnerability in bom.php in MyPic 2.1 allows remote attackers to list files in arbitrary directories via a .. dot dot in the dir parameter...

Microsoft IIS WebDAV Remote Authentication Bypass Vulnerability

Microsoft IIS Webserver with WebDAV Module is prone to remote authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Ubuntu 9.04 : clamav vulnerability (USN-770-1)

A flaw was discovered in the clamav-milter initscript which caused the ownership of the current working directory to be changed to the 'clamav' user. This update attempts to repair the incorrect ownership for standard system directories, but it is recommended that the following command be perform...

USN-770-1: ClamAV vulnerability

A flaw was discovered in the clamav-milter initscript which caused the ownership of the current working directory to be changed to the 'clamav' user. This update attempts to repair the incorrect ownership for standard system directories, but it is recommended that the following command be perform...

CVE-2009-0719

The CVE-2009-0719 entry concerns HP-UX: an unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 may allow local users to access arbitrary files/directories via unknown vectors. Open vulnerability references confirm local access impact. Remediation references include HP patc...

Information disclosure

NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service application crash via directories with long pathnames. NOTE: some of these details are obtained from third party information...

Ubuntu 7.10 : hplip vulnerability (USN-708-1)

It was discovered that an installation script in the HPLIP package would change permissions on the hplip config files located in user's home directories. A local user could exploit this and change permissions on arbitrary files upon an HPLIP installation or upgrade, which could lead to root...

Trend Micro OfficeScan 8.0 Client - Denial of Service

source: https://www.securityfocus.com/bid/34642/info The Trend Micro OfficeScan Client is prone to a denial-of-service vulnerability because it fails to handle nested directories with excessively long names. Successfully exploits will crash the affected application, resulting in a denial-of-servi...