The Uploader 2.0 - File Disclosure

Title: The Uploader 2.0 Remote File disclosure Vulnerability Author: Stack http://server/theuploader/api/downloadchecker.php?filename=../config.inc.php next open the config.inc.php file and you got the MySQL configuration user & password :d //MySQL configuration and connection functions...

Ignition 1.2 Multiple Local File Inclusion Vulnerabilities

No description provided by source. Ignition 1.2 Multiple Local File Inclusion Vulnerabilities disclosed by cOndemned download: http://launchpadlibrarian.net/27567060/ignition1.2.zip note: magicquotesgpc should be turned off in order to exploit this vulnerability greetz: all friends, SecurityReaso...

OpenJDK: Files disclosure, arbitrary code execution via "deserializing applets" (6646860)

Unspecified vulnerability in the Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.219 and earlier; and 1.3.124 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors...

Zen Cart File Disclosure

Usually, curl is used to connect and retrieve data from a remote URL using the http protocol. However, curl supports a bunch of protocols. One of these protocols is the file protocol. Using this protocol you can read local files by using an URL like file:///etc/passwd. Therefore, if the user can...

Zen Cart local file disclosure vulnerability

Usually, curl is used to connect and retrieve data from a remote URL using the http protocol. However, curl supports a bunch of protocols. One of these protocols is the file protocol. Using this protocol you can read local files by using an URL like file:///etc/passwd. Therefore, if the user can...

Simple Machines Forum XSS / XSRF / PHP Execution

This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...

40 vulnerabilities in SMF 1.1.10/SMF 2.0RC2 by elhacker.net (Simple Audit)

This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...

ISPworker <= 1.23 Remote File Disclosure exploit

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker = 1.23 Remote File Disclosure exploit Download Script : http://www.ispware.de/files/ispworker-1.23.tar.gz Dork : die"lamers attempt"; :P Vuln : ./ispworker-1.23/files/ispworker/module/ticket/download.php...

ISPworker 1.23 - Remote File Disclosure

ISPworker 1.23 - Remote File Disclosure Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 http://target/path/module/ticket/download.php?filename=../../../../../../../../../etc/passwd...

ISPWorker 1.23 File Disclosure

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 http://target/path/module/ticket/download.php?filename=../../../../../../../../../etc/passwd 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo /...

ISPworker <= 1.23 Remote File Disclosure exploit

Exploit for unknown platform in category web applications ================================================ ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00...

ISPworker 1.23 - Remote File Disclosure

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 http://target/path/module/ticket/download.php?filename=../../../../../../../../../etc/passwd 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo /...

Elxis CMS File Disclosure

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Elxis CMS Local File Disclosure Vulnerability Script Site : http://www.elxis.org Code : contentType."; charset=".$this-encoding; line 640 Header"Content-Disposition: inline; filename=".basename$filename; line 641 readfile$filename, "r"; line 642 di...

Adobe JRun 4 Server File Disclosure (CVE-2004-0928)

Adobe JRun is an application server used to deploy J2EE Java 2 Enterprise Edition applications, JSPs Java Server Pages, and other Java applications. It can be used as a stand-alone web server or can be accessed through other web servers including IIS and Apache. With IIS, JRun can be registered t...

USN-859-1: OpenJDK vulnerabilities

Dan Kaminsky discovered that SSL certificates signed with MD2 could be spoofed given enough time. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation in...

[MORNINGSTAR-2009-02] Multiple security issues in Cute News and UTF-8 Cute News

MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Cute News and UTF-8 Cute News 1. Advisory Information ------------------------------------------------------------------------------------------------------------------------ Title: Multiple security...

CVE-2009-3884

CVE-2009-3884 is an information-leak vulnerability in the TimeZone.getTimeZone handling for zoneinfo files used by Sun Java/OpenJDK JRE/OpenJDK (Sun JRE 5.0/6, Update 22/17 or prior, and OpenJDK). The issue allows a remote attacker to probe the local filesystem by observing how tz files are proce...

PHP 5.3.0 pdflib file disclosure

Exploit for unknown platform in category web applications ================================ PHP 5.3.0 pdflib file disclosure ================================ Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- ...

PHP 5.3.0 pdflib file disclosure

No description provided by source. Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- ?php // Author : Sina Yazdanmehr R3d.W0rm ; Our Site : http://IrCrash.com if!extensionloaded'pdf' die'pdf extension requir...

Sahana 'mod' Parameter Local File Disclosure Vulnerability

Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further...