CVE-2008-4676

Summary: CVE-2008-4676 describes an unspecified local privilege-escalation vulnerability in Citrix XenApp (formerly Presentation Server) 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0. The issue is triggered by unknown attack vectors related to cr...

CVE-2008-4676: Undefined Security Weakness

Unspecified vulnerability in Citrix XenApp formerly Presentation Server 4.5 Feature Pack 1 and earlier, Presentation Server 4.0, and Access Essentials 1.0, 1.5, and 2.0 allows local users to gain privileges via unknown attack vectors related to creating an unspecified file. NOTE: this might be th...

PHP Easy Downloader <= 1.5 Remote File Creation Exploit

No description provided by source. !/usr/bin/perl -------------------------------------------------------- PHP Easy Downloader = 1.5 Remote File Creation Exploit By StAkeR aka athos - StAkeRathotmaildotit On 17/10/2008 http://www.hasemithut.de/downloads/index.php...

PHP Easy Downloader <= 1.5 Remote File Creation Exploit

Exploit for unknown platform in category web applications ======================================================= PHP Easy Downloader ; if$code ! // print "? You must insert PHP Code\r\n"; exit; my $post = $http-post$host.'/fileinfo/admin/save.php', filename = $file, accesses = $code.'//', ;...

PHP Easy Downloader 1.5 - Remote File Creation

PHP Easy Downloader 1.5 - Remote File Creation !/usr/bin/perl -------------------------------------------------------- PHP Easy Downloader ; if$code ! // print "? You must insert PHP Code\r\n"; exit; my $post = $http-post$host.'/fileinfo/admin/save.php', filename = $file, accesses = $code.'//', ;...

ped-create.txt

!/usr/bin/perl -------------------------------------------------------- PHP Easy Downloader ; if$code ! // print "? You must insert PHP Code\r\n"; exit; my $post = $http-post$host.'/fileinfo/admin/save.php', filename = $file, accesses = $code.'//', ; if$post-issuccess if$post-asstring = /Upload...

PHP Easy Downloader 1.5 - Remote File Creation

!/usr/bin/perl -------------------------------------------------------- PHP Easy Downloader ; if$code ! // print "? You must insert PHP Code\r\n"; exit; my $post = $http-post$host.'/fileinfo/admin/save.php', filename = $file, accesses = $code.'//', ; if$post-issuccess if$post-asstring = /Upload...

CVE-2008-4501: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ dot dot backslash in the RNTO command...

Microsoft Rich Textbox ActiveX control SaveFile vulnerability

Added: 10/07/2008 CVE: CVE-2008-0237 BID: 27201 OSVDB: 40234 Background Microsoft Rich Textbox is an ActiveX control which comes with Visual Basic and allows creation of formatted text in RTF files. It is located in the Richtx32.ocx file. Problem The SaveFile method in the Rich Textbox ActiveX...

CVE-2008-4448

Cross-site request forgery CSRF vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized actions as an administrator, including file deletion and creation, via a link or IMG tag to the 1 overkill, 2 futils, or 3 edit actions...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized actions as an administrator, including file deletion and creation, via a link or IMG tag to the 1 overkill, 2 futils, or 3 edit actions...

CVE-2008-4448

Cross-site request forgery CSRF vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized actions as an administrator, including file deletion and creation, via a link or IMG tag to the 1 overkill, 2 futils, or 3 edit actions...

Serv-U < 7.3.0.1 Multiple Remote Vulnerabilities

Binary data 4699.prm...

CVE-2008-4448: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized actions as an administrator, including file deletion and creation, via a link or IMG tag to the 1 overkill, 2 futils, or 3 edit actions...

CVE-2008-4407: Undefined Security Weakness

XRunSabre in sabre aka xsabre 0.2.4b relies on the ability to create /tmp/sabre.log, which allows local users to cause a denial of service application unavailability by creating a /tmp/sabre.log file that cannot be overwritten...

CVE-2008-4342

NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control NMSDVDX.dll 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via...

CVE-2008-4342: Improper Input Validation

NuMedia Soft NMS DVD Burning SDK Activex NMSDVDX.DVDEngineX.1 ActiveX control NMSDVDX.dll 1.013C and earlier, as used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products, allows remote attackers to overwrite and create arbitrary files via...

PT-2008-5593 · Chilkat · Chilkat Xml Chilkatutil.Ckdata.1 Activex Control

Name of the Vulnerable Software and Affected Versions: Chilkat XML ChilkatUtil.CkData.1 ActiveX control versions 3.0.3.0 and earlier Description: The issue allows remote attackers to create, overwrite, and modify arbitrary files for execution via calls to specific methods. This can potentially be...

BurnAware NMSDVDXU ActiveX Remote Arbitrary File Creation/Execution

No description provided by source. ----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll = 1.0.0.13 CLSID: 0355854A-7F23-47E2-B7C3-97EE8DD42CD8...

burnaware-exec.txt

----------------------------------------------------------------------------- BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution url: http://www.burnaware.com File: NMSDVDXU.dll compatUI.RunApplication 1, "calc.exe", 1...