7643 matches found
roundcube -- arbitrary file disclosure vulnerability
RoundCube development team reports: After getting reports about a possible vulnerability of Roundcube which allows an attacker to modify its users preferences in a way that he/she can then read files from the server, we now published updated packages as well as patches that fix this security issu...
Open-Xchange Server 6 - Multiple Vulnerabilities
Open-Xchange Server 6 - Multiple Vulnerabilities Multiple security issues for Open-Xchange Server have been discovered and fixed. The vendor has chosen responsible full disclosure to publish security issue details. Users of the software have already been provided with patched versions. Proof...
mnoGoSearch <= 3.3.12 Multiple Vulnerabilities - Active Check
mnoGoSearch is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Piwigo arbitrary file disclosure and arbitrary file deletion vulnerability-vulnerability warning-the black bar safety net
Piwigo is written in PHP photo album script. Piwigo 2.4.6, and other versions did not properly validate the install. php script 'dl'parameter value, in the realization on the presence of security vulnerabilities, an attacker can exploit these vulnerabilities to view on the affected computer of an...
SEC Consult SA-20130308-0 :: Multiple critical vulnerabilities in GroundWork Monitor Enterprise (part 1)
SEC Consult Vulnerability Lab Security Advisory 20130308-0 ======================================================================= title: Multiple critical vulnerabilities part 1 product: GroundWork Monitor Enterprise vulnerable version: 6.7.0 fixed version: none - optional technical bulletin...
McAfee Email Gateway 7.0 File Disclosure
File disclosure vulnerability in McAfee Email Gateway Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
GroundWork Monitor Enterprise contains multiple vulnerabilities
Overview GroundWork Monitor Enterprise 6.7.0 and possibly earlier versions contain multiple vulnerabilities. Description The SEC Consult Vulnerability Lab Security Advisory states:The following vulnerability description has been categorized into the components where the vulnerabilities have been...
PT-2013-1336
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.23 PHP versions 5.4.x prior to 5.4.13 Description The issue is related to an XML External Entity XXE problem in the soap xmlParseFile and soap xmlParseMemory functions, allowing remote attackers to read arbitrary file...
Buffalo LinkStation Direct Request Remote File Disclosure
The web server included with the remote Buffalo LinkStation device does not properly configure access rights, which allows an unauthenticated remote attacker to gain access to sensitive files such as the device's private RSA key. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Piwigo <= 2.4.6 Arbitrary File Disclosure and Arbitrary File Deletion Vulnerabilities
Piwigo is prone to an arbitrary file-disclosure vulnerability and an arbitrary file-deletion vulnerability because the application fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
PHPMyGallery 1.51.010 XSS / Local File Disclosure
. . || || || | \ \ / | |/ // /\ \ \ |/ \ / / | |/ | | \ |\ \ \ \ / | | / \ / \ \ /| /| // /| ||\ | / / / / / / / www.janissaries.org ===================================================================== xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx...
Web Cookbook File Disclosure / SQL Injection Vulnerabilities
Web Cookbook suffers from file disclosure and remote SQL injection vulnerabilities. Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection...
Web Cookbook File Disclosure / SQL Injection
Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection http://bastardlabs/path/rezeptanzeige.php?currid=SQLi...
Web Cookbook - Multiple Vulnerabilities
Web Cookbook - Multiple Vulnerabilities Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection http://bastardlabs/path/rezeptanzeige.php?currid=SQLi...
PHPmyGallery 1.5 - Local File Disclosure Cross-Site Scripting
PHPmyGallery 1.5 - Local File Disclosure Cross-Site Scripting source: https://www.securityfocus.com/bid/58081/info PHPmyGallery is prone to multiple cross-site scripting vulnerabilities and a local file-disclosure vulnerability because it fails to sanitize user-supplied input. An attacker may...
Web Cookbook - Multiple Vulnerabilities
Web Cookbook Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/webcookbook/ Tested: Win 7 Proof of Concept SQL Injection http://bastardlabs/path/rezeptanzeige.php?currid=SQLi...
PHPmyGallery 1.5 - Local File Disclosure / Cross-Site Scripting
source: https://www.securityfocus.com/bid/58081/info PHPmyGallery is prone to multiple cross-site scripting vulnerabilities and a local file-disclosure vulnerability because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
Simple Machine Forum 2.0.x < 2.0.4 File Disclosure/Path Traversal
Exploit for php platform in category web applications Exploit Title: SMF /index.php?action=admin;area=logs;sa=errorlog;file=BASE64 ENCODED FILE PATH;line=LINE NUMBER Example : /srv/www/smf/Settings.php : L3Nydi93d3cvc21mL1NldHRpbmdzLnBocA= /etc/passwd : L2V0Yy9wYXNzd2Q= SMF Configuration File...
Simple Machine Forum 2.0.x 2.0.4 - File Disclosure Directory Traversal
Simple Machine Forum 2.0.x 2.0.4 - File Disclosure Directory Traversal Exploit Title: SMF /index.php?action=admin;area=logs;sa=errorlog;file=BASE64 ENCODED FILE PATH;line=LINE NUMBER Example : /srv/www/smf/Settings.php : L3Nydi93d3cvc21mL1NldHRpbmdzLnBocA= /etc/passwd : L2V0Yy9wYXNzd2Q= SMF...
Simple Machine Forum 2.0.x < 2.0.4 - File Disclosure / Directory Traversal
Exploit Title: SMF /index.php?action=admin;area=logs;sa=errorlog;file=BASE64 ENCODED FILE PATH;line=LINE NUMBER Example : /srv/www/smf/Settings.php : L3Nydi93d3cvc21mL1NldHRpbmdzLnBocA= /etc/passwd : L2V0Yy9wYXNzd2Q= SMF Configuration File Disclosure :...