docXP 1.1 => Local File Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: docXP 1.1 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://sourceforge.net/projects/docxp/ Version: 1.1 Category:: Local File Disclosure Vulnerability2 Tested on: Xp SP 2 Ex :...

House Style 0.1.2 => readfile() Local File Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: House Style 0.1.2 = readfile Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://sourceforge.net/projects/housestyle/ Version: 1.03 Category:: readfile Local File Disclosure...

Lc Flickr Carousel V1.0 => Local File Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: Lc Flickr Carousel V1.0 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://code.google.com/p/lcflickr/downloads/list Version: 1.0 Category:: Local File Disclosure Vulnerability2...

eCan v0.1 => Local File Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: eCan v0.1 = Local File Disclosure Vulnerability Date: 11/07/2012 Author: GoLdM Vendor or Software Link: http://sourceforge.net/projects/ecan/ Version: 1.03 Category:: Local File Disclosure Vulnerability2 Tested on: Xp SP 2 Ex :...

SEC Consult SA-20120626-0 :: Zend Framework - Local file disclosure via XXE injection

SEC Consult Vulnerability Lab Security Advisory 20120626-0 ======================================================================= title: Local file disclosure via XXE injection product: Zend Framework vulnerable version: 1.11.11 1.12.0 RC1 2.0.0 beta4 and earlier versions / branches fixed versio...

RulingSite-S system a plurality of defect and repair-vulnerability warning-the black bar safety net

A background --------------------- “IIS is aWeb serverapplication and a set of Created by Microsoft for use with Microsoft Windows the function Expansion Module. IIS is the third most popular server in the world.“ （Wikipedia） the. Overview --------------------- Vulnerability research team...

Microsoft IIS - Short File/Folder Name Disclosure

PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19525.zip Paper: http://www.exploit-db.com/docs/19527.pdf Security Research - IIS Short File/Folder Name Disclosure Website : http://soroush.secproject.com/blog/ I. BACKGROUND --------------------- "IIS is a web...

Microsoft IIS - Short FileFolder Name Disclosure

Microsoft IIS - Short FileFolder Name Disclosure PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/19525.zip Paper: http://www.exploit-db.com/docs/19527.pdf Security Research - IIS Short File/Folder Name Disclosure Website : http://soroush.secproject.com/blog...

Zend Framework Local File Disclosure

Exploit for php platform in category web applications ======================================================================= title: Local file disclosure via XXE injection product: Zend Framework vulnerable version: 1.11.11 1.12.0 RC1 2.0.0 beta4 and earlier versions / branches fixed version:...

DigPHP - 'dig.php' Script Remote File Disclosure

source: https://www.securityfocus.com/bid/54207/info DigPHP is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of the web server process, which may aid in furth...

Zend Framework XXE Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local file disclosure via XXE injection product: Zend Framework vulnerable version: 1.11.11 1.12.0 RC1 2.0.0 beta4 and earlier versions / branches fixed version: 1.11.12...

DigPHP - dig.php Script Remote File Disclosure

DigPHP - dig.php Script Remote File Disclosure source: https://www.securityfocus.com/bid/54207/info DigPHP is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of...

DigPHP Remote File Disclosure

Exploit Title: DigPHP - Web Based File Browser = Remote File Disclosure Vulnerability Date: 26/06/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps version: - Vendor or Software Link: http://sourceforge.net/projects/digphp/ Google dork: inurl:/dig.php?dir=./...

DigPHP - Web Based File Browser <= Remote File Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: DigPHP - Web Based File Browser = Remote File Disclosure Vulnerability Date: 26/06/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com Category: webapps version: - Vendor or Software Link:...

CMS DMS-Easy 0.9.8 CSRF / File Disclosure / Shell Upload

1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 0 x Official Website: http://www.1337day.com 1 1 x...

LimeSurvey 1.92+ Build120620 Remote File Inclusion / Traversal

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-06-22 LimeSurvey 1.92+ build 120620 Multiple Vulnerabilities Script: "LimeSurvey - the free and open source survey software...

DMS-Easy CMS - Multiple Vulnerability

Exploit for php platform in category web applications 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 0...

CVE-2012-0186: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows remote attackers to discover the locations of files via a crafted URL...

PT-2012-2384

Name of the Vulnerable Software and Affected Versions IBM Lotus Expeditor versions 6.1.x through 6.2.x before 6.2 FP5+Security Pack Description The issue allows remote attackers to discover the locations of files via a crafted URL, due to a directory traversal vulnerability in the Eclipse Help...

e107 Filedownload Plugin - Arbitrary File Upload / Remote File Disclosure

source: https://www.securityfocus.com/bid/54098/info The FileDownload Plugin for e107 is prone to an arbitrary file-upload vulnerability and a remote file-disclosure vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit these issues to...