H2O Directory Traversal Vulnerability

H2O is a set of open source Web server software . H2O suffers from a directory traversal vulnerability. When the program uses the file.dir directive, a remote attacker can exploit the vulnerability to read arbitrary files with the help of a specially crafted URL...

Huawei AR1200 series routers the background code for any implementation-vulnerability warning-the black bar safety net

School to a group of routers, not with, then test the following There's a function System administration diagnostics Ping ! Constituency 045. png Capture code area POST http://192.168.1.119/view/main/config.cgi HTTP/1.1 Host: 192.168.1.119 Connection: keep-alive Content-Length: 3 7 2 Origin:...

SQL Injection Vulnerability in OA System of Guangdong Oriental Thinking Technology Co.

Ltd. OA system is a set of office automation system, can solve the enterprises and institutions, government agencies, office automation and paperless office and other issues. Ltd. OA system there are SQL injection vulnerabilities, there are vulnerabilities in the link:...

VeryPhoto 3.0 Command Injection

Document Title: =============== VeryPhoto v3.0 iOS - Command Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1401 Release Date: ============= 2015-01-13 Vulnerability Laboratory ID VL-ID: ==================================== 1401...

KPPW最新版SQL注入漏洞八(全局问题导致12处注入及越权操作)

简要描述： KPPW最新版SQL注入漏洞八，从一处问题找出罪魁祸首，全局文件问题导致12处注入及越权操作 详细说明： KPPW最新版SQL注入漏洞八，从一处问题找出罪魁祸首，全局文件问题导致12处注入及越权操作 文件/control/pubgoods.php sysconfig'indexseodesc'; $id = intval$id; $step = strvaltrim$step; ...... $strUrl = "index.php?do=pubgoods&id=".$id; $SESSION'spread' = 'index.php?do=pubgoods'; requir...

WiFi HD v7.3.0 iOS - Multiple Vulnerabilities

Turn your iPhone into a wireless, mobile external hard drive! Works over any WiFi connection. You can now share, copy, and backup your files to and from your PC / Mac / Linux / or another phone! Very easy to use. No other software necessary! This is a simple, one stop, stand alone File Sharing...

AirDrive HD 1.6 Shell Upload

Title: ====== AirDrive HD 1.6 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=865 VL-ID: ===== 865 Common Vulnerability Scoring System: ==================================== 6.3 Introduction: =============...

MYSQL File/Directory Enumerator

Enumerate files and directories using the MySQL loadfile feature, for more information see the URL in the references. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'yaml' class MetasploitModule 'MYSQL...

Multiple Products wintab32.dll Insecure Library Loading (CVE-2013-0742)

A code execution vulnerability has been identified in Multiple Products. The vulnerability is due to an improper dynamic link library DLL search path leading to insecure library loading. A remote attacker could exploit this vulnerability by enticing a user to open a file from a directory, which...

Graduation thesis system upload vulnerability-vulnerability warning-the black bar safety net

Vulnerability in fileload directory of the FileUpload. asp file, with no fear of the formation of the upload Look at the code | 0 1 | var fu = new FileUpload"uploadForm","idFile", Limit: 3, ExtIn: "rar","doc","xls", RanName: true, ---|--- 0 2 | onIniFile: functionfile file. value ? file. style...

ImageMagick: invalid validation of images denial of service

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service infinite loop and hang via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF...

ImageMagick: invalid validation of images denial of service

ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service infinite loop and hang via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF...

php: buffer over-read in Exif extension

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service application crash via an image with a crafted Image File Directory IFD that triggers a buffer over-read...

php: buffer over-read in Exif extension

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service application crash via an image with a crafted Image File Directory IFD that triggers a buffer over-read...

SA-CORE-2011-003 - Drupal core - Access bypass

CVE: CVE-2011-2726 Access bypass in private file fields on comments. Drupal 7 contains two new features: the ability to attach File upload fields to any entity type in the system and the ability to point individual File upload fields to the private file directory. If a Drupal site is using these...

ESCMS website management system 0day-vulnerability warning-the black bar safety net

Background login authentication is through the admin/check. asp achieved,look at the code % if Request. cookiesCookiesKey"ESadmin"="" then 'Note that here Oh,he is by COOKIE validation ESadmin is empty,we can forge a value,called he is not empty 'CookiesKey in the inc/ESCMSConfig. asp file,the...

HJCMS enterprise website management system 7.0 injection vulnerability-vulnerability warning-the black bar safety net

Author:anon Vulnerability in /hjadmin/addj. asp !-- include file="../conn. asp"--%set js = server. CreateObject"ADODB. RecordSet"sql="select from ad where id="& request. QueryString"id"set js = conn. Execute Sqlif js"lx"=1 thengoaler = goaler + "a href=""adurl. asp? id="& js"id"&""" target="""&...

CVE-2010-4665

Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entri...

Buffer overflow

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service application crash via an image with a crafted Image File Directory IFD that triggers a buffer over-read...

CVE-2011-0708

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service application crash via an image with a crafted Image File Directory IFD that triggers a buffer over-read...