cyan soft - Multiple Applications Format String Denial of Service Vulnerabilities

cyan soft - Multiple Applications Format String Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/27728/info Multiple cyan soft products are affected by a format-string vulnerability because they fail to adequately sanitize user-supplied input before passing it as the...

Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340)

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: LSrunasE, Supercrypt Vendor: Geert Moernaut Type: Flawed Encryption Risk: Medium Author: Daniel Roethlisberger Date: 2008-01-29 CVE Name: CVE-2007-6340 Introduction ------------ LSrunasE 1 and Supercrypt 2 are utilities used to run commands...

SanyBee Gallery 0.1.1 (p) Local File Inclusion Vulnerability

No description provided by source. SanyBee Gallery 0.1.1 p local File Inclusion Script Name: SanyBee Gallery 0.1.1 D.Script: http://www.easy-script.com/scripts-dl/SanyBeeGalleryV0.1.0.zip Discovered by: jackal contact: [email protected] &...

Directory traversal

Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2007-6344

Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2007-6344

The CVE-2007-6344 issue affects Mcms Easy Web Make 1.3, where a directory traversal vulnerability in modules/cms/index.php allows remote inclusion and execution of local files via a .. in the template parameter. This enables an attacker to trigger arbitrary local file reads/executes on affected i...

Mcms Easy Web Make (index.php template) Local File Inclusion Vuln

No description provided by source. --------------------------------------------------------------- / | |\ / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

CVE-2007-6344: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

mcmseasy-lfi.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Local File...

Mcms Easy Web Make (index.php template) Local File Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================= Mcms Easy Web Make index.php template Local File Inclusion Vuln =================================================================...

Mcms Easy Web Make - index.php?template Local File Inclusion

Mcms Easy Web Make - index.php?template Local File Inclusion --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Mcms Easy Web Make - 'index.php?template' Local File Inclusion

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Local File...

Upload directory traversal in Easy File Sharing 4.5

Luigi Auriemma Application: Easy File Sharing Web Server http://www.sharing-file.com Versions: = 4.5 Platforms: Windows Bugs: A upload directory traversal B download of database files C possibility of reading sensitive files Exploitation: remote Date: 07 Dec 2007 Author: Luigi Auriemma e-mail:...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...

CVE-2007-6178

Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...

CVE-2007-6178

Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...

CVE-2007-6178

CVE-2007-6178 is a known remote file inclusion in Easy Hosting Control Panel (EHCP) for Ubuntu up to version 0.22.8 and earlier. The vulnerability allows an attacker to supply a URL in the confdir parameter to config/dbutil.bck.php and config/dbutil.php, potentially enabling arbitrary PHP code ex...

CVE-2007-6178: Improper Input Validation

Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...

CVE-2004-2747: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. dot dot in the DEL command, which triggers different error messages depending on...

[SECURITY] Fedora 7 Update: cups-1.2.12-6.fc7

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...