thinking arts es.one 1.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2385/info It is possible for a remote user to gain read access to directories and files outside the root directory of ES.One. Requesting a specially crafted URL by way of 'store.cgi', composed of '/../' sequences and...

W3Mail 1.0.6 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6170/info Versions of W3Mail 1.0.6 and greater are susceptible to a file disclosure vulnerability. To view attachments, the script viewAttachment.cgi accepts the parameter file. The value of this parameter is passed to th...

Alt-N WebAdmin 2.0.x Remote File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7439/info Reportedly, remote users can discover the installation directory of certain software on the underlying system by submitting an HTTP request to the WebAdmin server. This could allow an attacker to obtain sensitiv...

Abe Timmerman zml.cgi File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3759/info zml.cgi is a perl script which can be used to support server side include directives under Apache. It recognizes a simple set of commands, and allows access to cgi parameters and environment variables. It can ru...

Hosting Controller 1.x Browse.ASP File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4778/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The 'browse.asp' script is prone to an issue which ma...

XAMPP <= 1.7.3 multiple vulnerabilites

No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...

Wordpress Plugin: Newsletter 1.5 - Remote File Disclosure Vulnerability

No description provided by source...

Leif M. Wright Web Blog 1.1 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9517/info Web Blog is prone to a file disclosure vulnerability. Remote attackers may gain access to files on the system hosting the server that reside outside of the server root by submitting a malicious request that...

Lokomedia CMS (sukaCMS) Local File Disclosure Vulnerability

No description provided by source. Software Link: http://bukulokomedia.com Version: 2.0 Tested on: all OS + Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom + Site :...

Oracle Demantra 12.2.1 - Arbitrary File Disclosure

No description provided by source...

eCan 0.1 - Local File Disclosure Vulnerability

No description provided by source. Exploit Title: eCan v0.1 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://sourceforge.net/projects/ecan/ Version: 1.03 Category:: Local File Disclosure Vulnerability2 Tested on: Xp SP 2 Ex : eCan...

Basilix Webmail 1.0 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2995/info Basilix is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. During operation, Basilix opens a PHP include file using a variable as the...

Microsoft Internet Explorer 5 Cascading Style Sheet File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4411/info The Cascading Style-Sheets CSS interpreter for Microsoft Internet Explorer is prone to an issue which may allow an attacker to read the contents of files on a web user's system. It is possible to use the cssText...

Wordpress Tinymce Thumbnail Gallery Plugin 1.0.7 - Remote File Disclosure

No description provided by source. Description : Wordpress Plugins - Tinymce Thumbnail Gallery Remote File Disclosure Vulnerability Version : 1.0.7 Link : http://wordpress.org/extend/plugins/tinymce-thumbnail-gallery/ Plugins : http://downloads.wordpress.org/plugin/tinymce-thumbnail-gallery.zip...

Cpanel - (lastvisit.html domain) Arbitrary File Disclosure Vulnerability (auth)

No description provided by source. +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

Python CGIHTTPServer - Encoded Directory Traversal

Python CGIHTTPServer - Encoded Directory Traversal Advisory: Python CGIHTTPServer File Disclosure and Potential Code Execution The CGIHTTPServer Python module does not properly handle URL-encoded path separators in URLs. This may enable attackers to disclose a CGI script's source code or execute...

Python CGIHTTPServer Encoded Path Traversal Vulnerability

The CGIHTTPServer Python module does not properly handle URL-encoded path separators in URLs. This may enable attackers to disclose a CGI script's source code or execute arbitrary CGI scripts in the server's document root. The CGIHTTPServer Python module does not properly handle URL-encoded path...

Python CGIHTTPServer - Encoded Directory Traversal

Advisory: Python CGIHTTPServer File Disclosure and Potential Code Execution The CGIHTTPServer Python module does not properly handle URL-encoded path separators in URLs. This may enable attackers to disclose a CGI script's source code or execute arbitrary CGI scripts in the server's document root...

Python CGIHTTPServer File Disclosure / Code Execution

Advisory: Python CGIHTTPServer File Disclosure and Potential Code Execution The CGIHTTPServer Python module does not properly handle URL-encoded path separators in URLs. This may enable attackers to disclose a CGI script's source code or execute arbitrary CGI scripts in the server's document root...

ZTE WXV10 W300 - Multiple Vulnerabilities

ZTE WXV10 W300 - Multiple Vulnerabilities Exploit Title: ZTE WXV10 W300 Multiple Vulnerabilities Date: 17-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 Firmware: W300V1.0.0aZRDLK ADSL Firmware: FwVer:3.11.2.175TC3086 HwVer:T14.F75.0 Tested on: Kali Linux x8664...