CVE-2012-4873

GNUBoard is vulnerable to an XSS in the file_download function via the filename parameter, affecting versions before 4.34.21. The root cause is improper handling of the filename input leading to script/HTML injection. Remediation: upgrade to GNUBoard 4.34.21 or apply the provided patch. Public re...

Web File Browser 0.4b14 - File Download

Web File Browser 0.4b14 - File Download Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link: http://downloads.sourceforge.net/project/webfilebrowser/webfilebrowser/0.4b14/webfilebrowser-0.4b14.zip...

Web File Browser 0.4b14 File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link:...

易分销任意文件打包下载漏洞 管理员请删掉上一份 此份为准！

简要描述： 可以打包下载任意文件。。 详细说明： 通过注册注册地址：http://shop.fenxiaowang.com/index.php 进入试用后台 通过模板打包功能 修改提交参数 可以打包任何路径下的文件 方式如下 http://shop-xxxxxxx.shopex.fenxiaowang.com/shopadmin/index.php?ctl=system/template&act=dlpkg&p0=../../ 此漏洞同样存在 易开店系统。。 说一句无关的话：收到短信提醒 说shopex 给我发礼物，请我注意查收？礼物是什么 ？在哪里收？？？？！！！ 漏洞证明：...

JCMS 2010 - File Download

Title: JCMS 2010 File Download Vulnerability Date: 2010-11-22 Author: Beach Team: http://www.linux520.com/ Vendor: http://www.hanweb.com/ Language:Java Greetz: Brother Description: In /module/download/downfile.jsp ,filename and pathfile didn't verify user's input So this vulnerability allows an...

SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6616)

The Mozilla XULRunner engine was updated to version 1.9.0.15 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to...

Boiling prospect news system arbitrary File Download vulnerability-vulnerability warning-the black bar safety net

=============================================================== Author:Tr4c3dot1 2 6dotcom Copyright http://www.nspcn.org =============================================================== +++ Affected versions: Boiling prospect news systemcore:dust edge elegant environment V1. 1 Access version...

oblog File Download vulnerability-vulnerability warning-the black bar safety net

Reprint of the famous from http://www.52cmd.cn Today is April Fool's Day., we are not fools, not I do explain. At a glance you can see. The vulnerabilities exist in version 4. 6sql+access, all the way to track down. Vulnerability file: attachment. asp The use is very simple:...

Eurologon CMS files.php任何文件下载漏洞

Eurologon CMS是一款基于PHP的WEB应用程序。 Eurologon CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限下载任意文件，获得敏感信息。 问题是由于'files.php'脚本对用户提交的'file'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限下载任意文件，获得敏感信息。 Eurologon CMS 目前没有详细解决方案提供： http://www.eurologon.com/...

koreanghboard-multi.txt

Software : Korean GHBoard Site : http://www.ghlab.com/ Found by : Xcross87 1. File Upload Vulnerability Xploit : victim.com/ghboard/component/upload.jsp 2. FlashUpload component File Upload and File Download Vulnerability Upload Xploit : victim.com/ghboard/component/flashupload/upload.html Not...

Chupix CMS 0.2.3 - 'download.php' Remote File Disclosure

Chupix CMS 0.2.3 download.php Remote File Download Vulnerability P.Script : http://sourceforge.net/project/showfiles.php?groupid=134930 download.php Lain:18-57 - ifisset$GET'fichier' ", "", $result; $num = trim$result; else $num = 0; $num++; $msg = "";...

Blog Torrent preview 0.8 - arbitary file download

Intro ----- Blogtorrent is a collection of PHP scripts which are designed to make it simple to host files for transfer via bittorrent. Whilst it is not normal to report security problems in "preview" releases of software this software was covered prominently upon Slashdot and could be widely used...

Bugs fixed in Version 1.4.3

In-Reply-To: [email protected] B. Unspecified File Download Vulnerability B1. An error in the MyDMS software allows to a registered users and only to registered users to download any file, such as /etc/passwd, by inserting in a parameter a text such as...

CVE-2004-1838

Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. dot dot in the URL...

Valve Software Half-Life Dedicated Server 3.14.1 - Information DisclosureDenial of Service

Valve Software Half-Life Dedicated Server 3.14.1 - Information DisclosureDenial of Service source: https://www.securityfocus.com/bid/9070/info Half-Life dedicated server has been reported prone to an information disclosure vulnerability. This issue may also be exploited to deny service to...

CSSoft-EZTRansI-Eng.txt

STG Security Advisory: SSA-20030701-03 ChangshinSoft ezTrans Server File Download Vulnerability Revision 1.1 Date Published: 2003-07-08 KST Last Update: 2003-07-08 Disclosed by SSR Team [email protected] Synopsis ======== ezTrans Server, used by famous portal sites in Korea, is a real-time...

CVE-2003-0309

The CVE covers Microsoft Internet Explorer 5.01, 5.5, and 6.0 where a crafted web document with a large number of duplicate file:// or other requests using FRAME/IFRAME can trigger multiple file download dialogs, ultimately allowing remote code execution. The issue is mitigated by Microsoft patch...

Microsoft Internet Explorer does not safely handle multiple file download requests

Overview A problem in the way Microsoft Internet Explorer handles a large number of file download requests could result in the execution of arbitrary code on a vulnerable system. Description When Internet Explorer IE follows a link to an executable file .exe, a dialog window is displayed that...

[Opera 7/6] Long Filename Buffer Overflow Vulnerability in Download

Hi, all. We release the information about the vulnerability of Opera, here. And we hope that this vulnerability be fixed by Vendor immediately. ----------------------------------------------------------------- Synopsis: Opera 7/6 Long Filename Buffer Overflow Vulnerability in Download Product:...

CVE-2001-0875

Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download...