Directory traversal

Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote attackers to read arbitrary files via a .. dot dot in the url parameter...

CVE-2008-0814

CVE-2008-0814 describes a directory traversal in TRUC (Tracking Requirements & Use Cases) 0.11.0. The vulnerability affects download.php where the upload_filename parameter can be tainted with .. to read arbitrary files, enabling an attacker to disclose file contents. The issue is rooted in a mis...

CVE-2008-0814: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases TRUC 0.11.0 allows remote attackers to read arbitrary files via a .. dot dot in the uploadfilename parameter...

CVE-2008-0813: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote attackers to read arbitrary files via a .. dot dot in the url parameter...

truc-disclose.txt

TRUC 0.11.0 download.php Remote File Disclosure Vulnerability http://switch.dl.sourceforge.net/sourceforge/truc/truc0.11.0.tar.gz POC : /download.php?uploadfilename=configinc.php /download.php?uploadfilename=../../../../../../../../etc/passwd Dork : TRUC 0.11.0 :: © 2006 by ASDIS : I'm TRYAGI ; -...

XPWeb 3.3.2 (Download.php url) Remote File Disclosure Vulnerability

No description provided by source. XPWeb 3.3.2 Download.php url Remote File Disclosure Vulnerability http://puzzle.dl.sourceforge.net/sourceforge/xpweb/XPWebv3.3.2.tgz POC : /XPWebv3.3.2/Download.php?url=Config.inc.php /XPWebv3.3.2/Download.php?url=../../../../../../../etc/passwd Dorks :...

XPWeb 3.3.2 - url Remote File Disclosure

XPWeb 3.3.2 - url Remote File Disclosure XPWeb 3.3.2 Download.php url Remote File Disclosure Vulnerability http://puzzle.dl.sourceforge.net/sourceforge/xpweb/XPWebv3.3.2.tgz POC : /XPWebv3.3.2/Download.php?url=Config.inc.php /XPWebv3.3.2/Download.php?url=../../../../../../../etc/passwd Dorks :...

XPWeb 3.3.2 (Download.php url) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== XPWeb 3.3.2 Download.php url Remote File Disclosure Vulnerability =================================================================== XPWeb 3.3.2 Download.php url Remote...

XPWeb 3.3.2 - 'url' Remote File Disclosure

XPWeb 3.3.2 Download.php url Remote File Disclosure Vulnerability http://puzzle.dl.sourceforge.net/sourceforge/xpweb/XPWebv3.3.2.tgz POC : /XPWebv3.3.2/Download.php?url=Config.inc.php /XPWebv3.3.2/Download.php?url=../../../../../../../etc/passwd Dorks : intitle:XPWeb 3.3.2 intitle:XPWeb 3.0.1 I'm...

TRUC 0.11.0 (download.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== TRUC 0.11.0 download.php Remote File Disclosure Vulnerability =============================================================== TRUC 0.11.0 download.php Remote File Disclosure...

TRUC 0.11.0 - download.php Remote File Disclosure

TRUC 0.11.0 - download.php Remote File Disclosure TRUC 0.11.0 download.php Remote File Disclosure Vulnerability http://switch.dl.sourceforge.net/sourceforge/truc/truc0.11.0.tar.gz POC : /download.php?uploadfilename=configinc.php /download.php?uploadfilename=../../../../../../../../etc/passwd Dork...

TRUC 0.11.0 - 'download.php' Remote File Disclosure

TRUC 0.11.0 download.php Remote File Disclosure Vulnerability http://switch.dl.sourceforge.net/sourceforge/truc/truc0.11.0.tar.gz POC : /download.php?uploadfilename=configinc.php /download.php?uploadfilename=../../../../../../../../etc/passwd Dork : TRUC 0.11.0 :: © 2006 by ASDIS : I'm TRYAGI ; ...

CVE-2008-0797: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary files via directory traversal sequences in the url parameter...

CVE-2008-0431: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in administrator/download.php in IDMOS aka Phoenix 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the fileName parameter...

CVE-2007-6653

The CVE-2007-6653 entry describes a Directory traversal vulnerability in Mihalism Multi Host 2.0.7, affecting the download.php script. The vulnerability allows remote attackers to read arbitrary files by manipulating the file parameter with a .. (dot dot) sequence. Documented impact is read acces...

CVE-2007-6653: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Mihalism Multi Host 2.0.7 download.php Remote File Disclosure Vuln

No description provided by source. &nbs...

Mihalism Multi Host 2.0.7 - 'download.php' Remote File Disclosure

Mihalism Multi Host v2.0.7 download.php Remote File Disclosure Vuln Script Page : : POC : /Script/download.php?file=../../../../../../../../../../../etc/passwd D0rkS : Powered by Mihalism Multi Host v2.0.7 Powered by Mihalism Multi Host v2.0.5 Powered by Mihalism Multi Host v2.0.4 Powered by...

Sql injection

Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands via the 1 categorie parameter to catdownload.php, or the id parameter to 2 download.php or 3 hitcounter.php...

CVE-2007-6373: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands via the 1 categorie parameter to catdownload.php, or the id parameter to 2 download.php or 3 hitcounter.php...