6010 matches found
RRDBrowse 1.6 - Arbitrary File Disclosure
RRDBrowse 1.6 - Arbitrary File Disclosure I - TITLE Security advisory: Arbitrary file disclosure vulnerability in rrdbrowse II - SUMMARY Description: Arbitrary file disclosure vulnerability in rrdbrowse = 1.6 Author: Sebastian Wolfgarten sebastian at wolfgarten dot com, http://www.devtarget.org...
RRDBrowse <= 1.6 Remote Arbitrary File Disclosure Vulnerability
Exploit for cgi platform in category web applications =============================================================== RRDBrowse = 1.6 Remote Arbitrary File Disclosure Vulnerability =============================================================== I - TITLE Security advisory: Arbitrary file disclosu...
CVE-2007-1152
Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a .. dot dot in the 1 act or 2 pid parameter to the top-level URI index.php, or the 3 action parameter to admin/index.php. NOTE: some of these details are obtained from third part...
Sql injection
SQL injection vulnerability in nukesentinel.php in NukeSentinel 2.5.05, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, aka the "File Disclosure Exploit."...
CVE-2007-1172
SQL injection vulnerability in nukesentinel.php in NukeSentinel 2.5.05, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, aka the "File Disclosure Exploit."...
CVE-2007-1172
The CVE-2007-1172 entry documents a SQL injection vulnerability in nukesentinel.php affecting NukeSentinel 2.5.05 and possibly earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header (the File Disclosure Exploit). This affects the applica...
[Full-disclosure] SEC Consult SA-20070226-0 :: File Disclosure in Pagesetter for PostNuke
SEC Consult Security Advisory 20070226-0 ======================================================================= title: File Disclosure in Pagesetter for PostNuke program: Pagesetter page creation module vulnerable version: 6.2.0 6.3.0 beta 5 impact: high homepage: http://www.elfisk.dk found:...
nukesentinel-disclose.txt
!/usr/bin/php File Disclosure Maybe work on other versions. Interesting exploit = if$argc URL: http://www.acid-root.new.fr/ Support us: Just click once on our publicity ; ------------------------------------------------------------------ Usage: $argv0 -url -file Options Example: $argv0 -url...
deV!Lz Clanportal [DZCP] <= 1.4.5 Remote File Disclosure Vulnerability
No description provided by source. DZCP Devilz Clanportal = 1.4.5 Mysql Data viewable Found by: Kiba Solution: Install security Fix! Exploit: http://SITE/PATH/inc/filebrowser/browser.php?file=inc/mysql.php Example: http://www.example.com/dzcp/inc/filebrowser/browser.php?file=inc/mysql.php...
NukeSentinel 2.5.05 (nukesentinel.php) File Disclosure Exploit
No description provided by source. !/usr/bin/php File Disclosure Maybe work on other versions. Interesting exploit = if$argc URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0 -url -file Options Example: $argv0 -url...
deV!Lz Clanportal [DZCP] <= 1.4.5 Remote File Disclosure Vulnerability
No description provided by source. DZCP Devilz Clanportal = 1.4.5 Mysql Data viewable Found by: Kiba Solution: Install security Fix! Exploit: http://SITE/PATH/inc/filebrowser/browser.php?file=inc/mysql.php Example: http://www.example.com/dzcp/inc/filebrowser/browser.php?file=inc/mysql.php...
DZCP (deV!L_z Clanportal) 1.4.5 - Remote File Disclosure
DZCP deV!Lz Clanportal 1.4.5 - Remote File Disclosure DZCP Devilz Clanportal = 1.4.5 Mysql Data viewable Found by: Kiba Solution: Install security Fix! Exploit: http://SITE/PATH/inc/filebrowser/browser.php?file=inc/mysql.php Example:...
DZCP (deV!L_z Clanportal) 1.4.5 - Remote File Disclosure
DZCP Devilz Clanportal = 1.4.5 Mysql Data viewable Found by: Kiba Solution: Install security Fix! Exploit: http://SITE/PATH/inc/filebrowser/browser.php?file=inc/mysql.php Example: http://www.example.com/dzcp/inc/filebrowser/browser.php?file=inc/mysql.php milw0rm.com 2007-02-21...
deV!Lz Clanportal [DZCP] <= 1.4.5 Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ====================================================================== deV!Lz Clanportal DZCP = 1.4.5 Remote File Disclosure Vulnerability ====================================================================== DZCP Devilz Clanportal = 1.4....
NukeSentinel 2.5.05 - nukesentinel.php File Disclosure
NukeSentinel 2.5.05 - nukesentinel.php File Disclosure !/usr/bin/php File Disclosure Maybe work on other versions. Interesting exploit = if$argc URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0 -url -file Options Example: $argv0 -u...
NukeSentinel 2.5.05 - 'nukesentinel.php' File Disclosure
!/usr/bin/php File Disclosure Maybe work on other versions. Interesting exploit = if$argc URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0 -url -file Options Example: $argv0 -url http://www.victim.com/ -file config.php Options:...
NukeSentinel 2.5.05 (nukesentinel.php) File Disclosure Exploit
Exploit for unknown platform in category web applications ============================================================== NukeSentinel 2.5.05 nukesentinel.php File Disclosure Exploit ============================================================== !/usr/bin/php File Disclosure Maybe work on other...
Xpression News 1.0.1 (archives.php) Remote File Disclosure Exploit
Exploit for unknown platform in category web applications ================================================================== Xpression News 1.0.1 archives.php Remote File Disclosure Exploit ================================================================== r0ut3r Presents... Another r0ut3r...
Xpression News 1.0.1 (archives.php) Remote File Disclosure Exploit
No description provided by source. r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com XNews Remote File Disclosure Exploit Software: Xnews 1.0.1 Vendor: http://xpression.hogsmeade-village.com/ Released: 2007/01/28 Discovered & Exploit By: r0ut3r writ3...
Xpression News 1.0.1 - archives.php Remote File Disclosure
Xpression News 1.0.1 - archives.php Remote File Disclosure r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com XNews Remote File Disclosure Exploit Software: Xnews 1.0.1 Vendor: http://xpression.hogsmeade-village.com/ Released: 2007/01/28 Discovered & Exploit By: r0ut3r writ3r at...