FTPGetter 3.51.0.05 Directory Traversal

Vulnerability ID: HTB22567 Reference: http://www.htbridge.ch/advisory/directorytraversalinftpgetter.html Product: FTPGetter Vendor: FTPGetter Team http://www.ftpgetter.com/ Vulnerable Version: 3.51.0.05 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: File Conte...

AutoFTP Manager 4.31 Directory Traversal

Vulnerability ID: HTB22566 Reference: http://www.htbridge.ch/advisory/directorytraversalinautoftpmanager.html Product: AutoFTP Manager Vendor: DeskShare http://www.deskshare.com/afm.aspx Vulnerable Version: 4.31 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type:...

Directory Traversal in FTPGetter

Vulnerability ID: HTB22567 Reference: http://www.htbridge.ch/advisory/directorytraversalinftpgetter.html Product: FTPGetter Vendor: FTPGetter Team http://www.ftpgetter.com/ Vulnerable Version: 3.51.0.05 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: File Conte...

Directory Traversal in 3D FTP Client

Vulnerability ID: HTB22565 Reference: http://www.htbridge.ch/advisory/directorytraversalin3dftpclient.html Product: 3D FTP Client Vendor: SiteDesigner Technologies, Inc. http://3dftp.com/3dftp.htm Vulnerable Version: 9.0 build 2 and Probably Prior Versions Vendor Notification: 05 August 2010...

Directory Traversal in AutoFTP Manager

Vulnerability ID: HTB22566 Reference: http://www.htbridge.ch/advisory/directorytraversalinautoftpmanager.html Product: AutoFTP Manager Vendor: DeskShare http://www.deskshare.com/afm.aspx Vulnerable Version: 4.31 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type:...

GLSA-200909-14 : Horde: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200909-14 Horde: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Horde: Gunnar Wrobel reported an input sanitation and directory traversal flaw in framework/Image/Image.php, related to the 'HordeImage...

CentOS 3 : seamonkey (CESA-2009:1096)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

Coppermine Photo Gallery 'lang' Cookie参数本地文件包含漏洞

Bugraq ID: 30480 CNCAN ID：CNCAN-2009052002 Coppermine Photo Gallery是一款基于WEB的图库程序。 Coppermine Photo Gallery不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 在用于包含文件钱传递给"GLOBALSUSERlang"的参数不正确过滤，可导致提交特殊请求以WEB权限查看系统文件内容。 Coppermine Photo Gallery 1.4.22 Coppermine Photo Gallery 1.4.21 Coppermine Photo Gallery...

Femitter FTP Server 1.03 Arbitrary File Disclosure Exploit

Exploit for windows platform in category remote exploits ========================================================== Femitter FTP Server 1.03 Arbitrary File Disclosure Exploit ========================================================== !/usr/bin/perl Femitter FTP Server 1.03 Arbitrary File Disclosu...

Femitter FTP Server 1.03 - Arbitrary File Disclosure

Femitter FTP Server 1.03 - Arbitrary File Disclosure !/usr/bin/perl Femitter FTP Server 1.03 Arbitrary File Disclosure Exploit Like ftpdmin 0.96 the same exploit but here is work just with double slach not 1 :d xd By stack Cyber-Zone use LWP::Simple; use LWP::UserAgent; if @ARGV \n"; print"TARGET...

Femitter FTP Server 1.03 - Arbitrary File Disclosure

!/usr/bin/perl Femitter FTP Server 1.03 Arbitrary File Disclosure Exploit Like ftpdmin 0.96 the same exploit but here is work just with double slach not 1 :d xd By stack Cyber-Zone use LWP::Simple; use LWP::UserAgent; if @ARGV \n"; print"TARGETS are\n "; print"Define full path with file name \n";...

Hack how to Access to access MSSQL Data-vulnerability warning-the black bar safety net

First of all note that, this method have long had, but with time probably in my head quiet for too long, it has been in the oblivion state. Thanks for the Trace information. Often encounter arbitrary File Download vulnerability, the General processing method is to put the database connection file...

CVE-2009-1332

The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors...

ftpdmin 0.96 Arbitrary File Disclosure Exploit

No description provided by source. !/usr/bin/perl ftpdmin 0.96 Arbitrary File Disclosure Exploit Vulnerability Disclosure by 1 Slach or 2 Slach Tested on Win XP SP2 but it work in other box environment Abouts Exploit : first thing after we exec the application it make our box a simple ftp server ...

Simple PHP test-vulnerability warning-the black bar safety net

The test site is as follows http://www.. com Find a stepping on point http://www.. com/zhaobiao/zhaobiaohyshow. php? id=1 4 9 8 3 0 Submit a' Returns the result Warning: mysqlresult: supplied argument is not a valid MySQL result resource in /var/www/html/zhaobiao/zhaobiaohyshow.php on line 1 3 5...

DZ! sodb-2 0 0 8-1 3 EXP published-vulnerability warning-the black bar safety net

!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / $host = ‘www.80vul.com’; // Server domain or IP $path = ‘/discuz/’; // Where the program path $key = 0; // The above variable is edited, make will the value...

dbsoftware-multi.txt

----------------------------------------------------------------------------- db Software Laboratory VImpX VImpX.ocx Multiple vulnerabilities url: http://www.dbsoftlab.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net Info: File: VImpX.ocx v. 4.8.8.0 CLSID:...

db Software Laboratory VImpX - 'VImpX.ocx' Multiple Vulnerabilities

----------------------------------------------------------------------------- db Software Laboratory VImpX VImpX.ocx Multiple vulnerabilities url: http://www.dbsoftlab.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net Info: File: VImpX.ocx v. 4.8.8.0 CLSID:...

Bugzilla '--attach_path'目录遍历漏洞

BUGTRAQ ID: 30661 CNCAN ID：CNCAN-2008081413 Bugzilla是一款开源的软件bug追踪系统。 Bugzilla存在目录遍历问题，远程攻击者可以利用漏洞以服务程序上下文查看本地文件内容。 当使用importxml.pl导入bugs时，可指定--attachpath选项，指向要导入附件所存储的目录，如果XML文件被importxml.pl读取时包含 data...