WebPagetest 'file' parameter Local File Disclosure Vulnerability

WebPagetest is prone to local file disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TYPO3 jumpUrl File Disclosure Vulnerability (TYPO3-SA-2009-002)

TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...

IBM Rational Focal Point RequestAccessController Servlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Rational Focal Point. Authentication is not required to exploit this vulnerability. The specific flaw exists within com.telelogic.focalpoint.pres.controller.RequestAccessController servlet whic...

iScripts Support Desk 4.1 SQL Injection

Normal Sql postticketbeforeregistersave.php Staff table post : txtname=faris&[email protected]&prty=0&deptid=11 /!1337andselect 1 fromselect count,concatselect select select distinct concat0x7e,0x27,unhexHexcasttablename as char,0x27,0x7e from informationschema.tables where tableschema=databas...

iScripts AutoHoster PHP Code Injection Vulnerability

iScripts AutoHoster suffers from file disclosure, PHP code injection, file disclosure, and remote SQL injection vulnerabilities. ?php / + iScripts AutoHoster + Multiple vulnerabilities , PHP Code injection Exploit + Author : i-Hmx + email protected + sec4ever.com , 1337s.cc I.Sql Injection Vuln...

Multiple D-Link DIR Series Routers 'model/__show_info.php' Local File Disclosure Vulnerability

Multiple D-Link DIR series routers are prone to a local file disclosure vulnerability because the routers fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

iScripts AutoHoster PHP Code Injection

?php / + iScripts AutoHoster + Multiple vulnerabilities , PHP Code injection Exploit + Author : i-Hmx + [email protected] + sec4ever.com , 1337s.cc I.Sql Injection Vuln /checktransferstatus.php Table name : submit=faris&cmbdomain=i-Hmx' /!1337union all select 0x6661726973,select distinct...

PT-2013-6094

Name of the Vulnerable Software and Affected Versions Cisco Cloud Portal version 9.4 Description The issue allows remote attackers to read files of unspecified types via a direct request. Recommendations For Cisco Cloud Portal version 9.4, update to a version that includes the fixes for Bug IDs...

WordPress Plugin DZS Video Gallery 3.1.3 - Remote and Local File Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version:...

WordPress DZS Video Gallery 3.1.3 Remote File Disclosure

Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version: ALL Affected File: preview.php Date: 03/12/2013 Explo...

WordPress DZS Video Gallery Plugin 3.1.3 - Remote and Local File Disclosure Vulnerabilities

DZS Video Gallery plugin is prone to remote and local files disclosure vulnerabilities. Solution Upgrade the plugin...

WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure Local File Disclosure

WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure Local File Disclosure Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage:...

[Wapiti 2.3.0] Web Application Vulnerability Scanner

Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data. Once it gets this list, Wapiti act...

D-Link DIR-Series Routers - model__show_info.php Local File Disclosure

D-Link DIR-Series Routers - modelshowinfo.php Local File Disclosure source: https://www.securityfocus.com/bid/64043/info Multiple D-Link DIR series routers are prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability...

Nagios Looking Glass Addon for Nagios server/s3_download.php File Disclosure

The Nagios Looking Glass Addon for Nagios installed on the remote host is affected by a file disclosure vulnerability. By sending a specially crafted request to the Addon's 'server/s3download.php' script, a remote, unauthenticated attacker can leverage this vulnerability to obtain the contents of...

D-Link DIR-Series Routers - '/model/__show_info.php' Local File Disclosure

source: https://www.securityfocus.com/bid/64043/info Multiple D-Link DIR series routers are prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information...

Limonade Framework - limonade.php Local File Disclosure

Limonade Framework - limonade.php Local File Disclosure source: https://www.securityfocus.com/bid/63771/info Limonade framework is prone to a local file-disclosure vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to obtain sensitive information...

Limonade Framework 3.0 Local File Disclosure

Exploit Title: Limonade framework Local file disclosure filtering bypass Date: 2013 17 November Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://limonade-php.github.io/‎ Tested on: Linux Ubuntu, PHP...

Limonade Framework 3.0 Local File Disclosure Vulnerability

Limonade Framework version 3.0 suffers from a local file disclosure vulnerability. Exploit Title: Limonade framework Local file disclosure filtering bypass Date: 2013 17 November Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir...

Limonade Framework - 'limonade.php' Local File Disclosure

source: https://www.securityfocus.com/bid/63771/info Limonade framework is prone to a local file-disclosure vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to obtain sensitive information from local files on computers running the vulnerable...