NULL NUKE CMS 2.2 - Multiple Vulnerabilities

NULL NUKE CMS 2.2 - Multiple Vulnerabilities NULL NUKE CMS v2.2 Multiple Vulnerabilities Vendor: nullwanton Product web page: http://sourceforge.net/projects/nullnuke/ Affected version: 2.2 and 2.1 rc3 Summary: NULL-8x3-NUKE is a fast, powerful and secure cross platform CMS for windows and Linux...

NULL NUKE CMS v2.2 Multiple Vulnerabilities

Summary NULL-8x3-NUKE is a fast, powerful and secure cross platform CMS for windows and Linux using base or full drive paths. Description NULL NUKE CMS suffers from multiple remote vulnerabilities including Stored/Reflected XSS, SQL Injection, Arbitrary File Upload, RCE, Arbitrary File Deletion,...

EasyTalk任意文件删除漏洞（可删除内置waf）

简要描述： EasyTalk任意文件删除漏洞 详细说明： EasyTalk存在两处任意文件删除漏洞。 一处是在SettingAction.class.php文件的doface函数处，已经有人提交过了。 这里是在GuideAction.class.php文件的doface2函数处。 //头像裁剪处理 public function doface2 $ysw=$POST'ysw'; if $ysw660 $zoom=intval$ysw/660; else $zoom=1; $x=$POST'x'$zoom; $y=$POST'y'$zoom; $w=$POST'w'$zoom;...

CVE-2014-0466

The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file...

DEBIAN-CVE-2014-0466

The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file...

CVE-2014-0466

The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file...

UBUNTU-CVE-2014-0466

The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file...

Check_MK 任意文件删除漏洞(CVE-2014-2332)

BUGTRAQ ID:66396 CVE ID:CVE-2014-2332 CheckMK是一款通用的Nagios/Icinga数据采集插件。 CheckMK 1.2.2p2及其他版本在实现上存在任意文件删除漏洞，成功利用后可使远程攻击者删除受影响应用上下文内的任意文件。 0 mathias-kettner checkmk 1.2.2p2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://mathias-kettner.de...

E-Commerce system ShopNC multiple vulnerabilities can be combined with violence getshell-a vulnerability warning-the black bar safety net

Foreword ShopNC is a network city create want to the company's service to business customers in the e-Commerce system, based on PHP5 technology uses the MVC pattern development, this article describes shopnc multiple vulnerabilities combined,can be getshell a little violent-- ! Arbitrary file...

MGASA-2014-0116 Updated egroupware package fixes security vulnerability

eGroupware prior to 1.8.006.20140217 is vulnerable to remote file deletion and possible remote code execution due to user input being passed to PHP's unserialize method CVE-2014-2027...

Updated egroupware package fixes security vulnerability

eGroupware prior to 1.8.006.20140217 is vulnerable to remote file deletion and possible remote code execution due to user input being passed to PHP's unserialize method CVE-2014-2027...

WordPress VideoWhisper Live Streaming Integration多个目录遍历漏洞

BUGTRAQ ID: 65877 CVECAN ID: CVE-2014-1907 WordPress VideoWhisper Live Streaming Integration软件可以将视频广播功能添加到WordPress站点，也可将实时视频流添加到博客页。 VideoWhisper Live Streaming Integration 4.27.3及其他版本没有有效过滤脚本"/wp-content/plugins/videowhisper-live-streaming-integration/ls/rtmplog in.php"内的"s" HTTP...

Thinksaas CSRF导致任意文件删除

简要描述： Get形式的CSRF，任意处插入url，管理员浏览后克删除任意文件。 详细说明： /app/system/action/sql.php case "delete": $sql = tsFilter$GET'sql'; rmrf'data/baksql/'.$sql; qiMsg'删除成功！如果有其他卷文件请一同删除!'; break; delete参数以get方式传递。并未加token判断，导致CSRF。...

Egroupware 1.8.005 PHP Object Insertion

Vulnerabilities in EGroupware 1.8.005 Discovered by Pedro Ribeiro [email protected] of Agile Information Security ==================================================================== Vulnerability: PHP object insertion leading to all kinds of badness arbitrary file deletion, possible code executio...

PT-2024-16300 · WordPress · Wplms Learning Management System

Name of the Vulnerable Software and Affected Versions: WPLMS Learning Management System for WordPress versions prior to 4.963 Description: The WPLMS Learning Management System for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation and permissions...

Multiple Vulnerabilities in VideoWhisper Live Streaming Integration WP Plugin

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in VideoWhisper Live Streaming Integration, which can be exploited to execute arbitrary code on the target system, gain access to potentially sensitive data, perform Cross-Site Scripting XSS attacks against users of...

ImpressCMS 1.3.5 - Multiple Vulnerabilities

ImpressCMS 1.3.5 - Multiple Vulnerabilities I have discovered two vulnerabilities in ImpressCMS. These have been fixed in the new 1.3.6 version, which you can get at https://sourceforge.net/projects/impresscms/files/ImpressCMS%20Official%20Releases/ImpressCMS%201.3%20Branch/ImpressCMS%201.3.6/. O...

ImpressCMS 1.3.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications I have discovered two vulnerabilities in ImpressCMS. These have been fixed in the new 1.3.6 version, which you can get at...

ownCloud 6.0.0a - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: ownCloud 6.0.0a File Deletion XSS and CSRF Protection Bypass Vendor Homepage: www.ownCloud.org OwnCloud Version: 6.0.0a Browsers tested: Iceweasel 22.0; Internet Explorer 11; Server: Debian. Default LAMP set-up. Exploit Author:...

ownCloud 6.0.0a - Multiple Vulnerabilities

ownCloud 6.0.0a - Multiple Vulnerabilities Exploit Title: ownCloud 6.0.0a File Deletion XSS and CSRF Protection Bypass Vendor Homepage: www.ownCloud.org OwnCloud Version: 6.0.0a Browsers tested: Iceweasel 22.0; Internet Explorer 11; Server: Debian. Default LAMP set-up. Exploit Author: James Sible...