6543 matches found
WordPress Plugin Firestats - Remote Configuration File Download
Exploit Title: Wordpress firestats remote configuration file download Date: 2010-07-09 Author: Jelmer de Hen Software Link: http://firestats.cc/ Version: 1.6.5 Tested on: PHP Do a simple GET request to this file: /wp-content/plugins/firestats/php/tools/getconfig.php This will allow you to downloa...
Internet Explorer File Download Dialog Box Manipulation (MS05-054; CVE-2005-2829)
Microsoft Internet Explorer IE is a web browser application capable of downloading and displaying various Internet resources. With IE, a user can download files from network servers using various protocols such as HTTP and FTP. IE can parse and display HTML pages and image files by itself. For...
Yxbbs Forum system Ver 3.1.0 multiple vulnerabilities-vulnerability warning-the black bar safety net
Yxbbs by the Y network developed a set of open source free Community Forum system program, using asp+Access SQL technical. Speed: the use of currently the more popular caching technology, which greatly accelerates the forum access speed Function: although the function can not be and dynamic netwo...
PHP168 V6 download any file vulnerability-vulnerability warning-the black bar safety net
漏洞 文件 download.php Vulnerability related to the file HASH b912249a22b630c04f7ad65f8ba5a2f6 download.php $url=base64decode$url; //2 line 7 $fileurl=strreplace$webdbwwwurl,"",$url; if eregi". php$",$fileurl && isfilePHP168PATH."$ fileurl" //determine the file drop out is not php, if it is php, and...
Plotwn 18 - .wp2 Local Buffer Overflow (PoC)
Plotwn 18 - .wp2 Local Buffer Overflow PoC !/usr/bin/perl Exploit Title : Plotwn 18 .wp2 local Buffer Overflow Poc tested on windows xp SP 3 FR Author: MadjiX - Dz8atHotmaiLdotCoM download: http://math.exeter.edu/rparris/peanut/wpfr32z.exe Special Greets:Bibi-info , His0k4 where are you : EAX...
Interscan Web Security Virtual Appliance 5.0 - Arbitrary File Download
Interscan Web Security Virtual Appliance 5.0 - Arbitrary File Download Exploit Title: Arbitrary File Download in InterScan Web Security Virtual Appliance 5.0 Date: 22-06-2010 Author: Ivan Huertas Software Link: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=249®s=NABU?loc=1...
Interscan Web Security Virtual Appliance 5.0 - Arbitrary File Download
Exploit Title: Arbitrary File Download in InterScan Web Security Virtual Appliance 5.0 Date: 22-06-2010 Author: Ivan Huertas Software Link: http://downloadcenter.trendmicro.com/index.php?clk=tbl&clkval=249®s=NABU?loc=1 Version: 5.0 Tested on: Red Hat Nash 5.1 Vulnerability Description: The...
The Uploader 2.0.4 Remote File disclosure Vulnerability
Exploit for php platform in category web applications ======================================================= The Uploader 2.0.4 Remote File disclosure Vulnerability ======================================================= Script Name : The Uploader Version: 2.0.4 Language : php Author : Xa7m3d...
Han Edition through JCMS arbitrary File Download vulnerability-vulnerability warning-the black bar safety net
Han Edition through JCMS Java Content Management System is a set of J2EE-based architecture design to new concept build of the content management system. The system is provided from the content acquisition, creation, management, transfer, publish, share presentation and other information the full...
TitanFTP Server COMB directory traversal
Accensus Security Advisory L-01 TitanFtp Server Arbitrary File Download/Delete Details ============= Product: TitanFTPd Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...
TitanFtp Server 8.10.1125 Arbitrary File Download / Delete
Accensus Security Advisory L-01 TitanFtp Server Arbitrary File Download/Delete Details ============= Product: TitanFTPd Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...
PHPCMS2008 100527版本网站管理系统下载任意文件漏洞
phpcms2008sp4 下载任意文件漏洞发布后，27号官方的补丁是这样的： down.php ifpregmatch'/.php/i',$f || strpos$f, ":\" showmessage'地址有误'; //12行 没补丁前是这样的： ifpregmatch'/.php$/',$f || strpos$f, ":\" showmessage'地址有误'; //12行 可以看出两者的区别。 但同样是这个文件中： parsestr$ak;//8行 知道这里还有更好的利用方法了，再看文件： download.php if$m $fileurl =...
phpcms2008sp4网站管理系统下载任意文件漏洞
comment\down.php ifpregmatch'/.php$/',$f || strpos$f, ":\" showmessage'地址有误'; //12行 只判断文件后辍 PHP，但没有考虑到在win系统中，文件名为：“xx.php ” 后面多了一个空格。也会被认为是 xx.php文件，因此，利用这个原理，当phpcms运行在win系统下，我们可以下载任意文件。 phpcms2008sp4UTF8100510 厂商补丁： PHPCMS ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Smart Douran CMS File Disclosure
Securitylab.ir Application Info: Name: Smart Douran CMS Vendor: http://smartdouran.ir Vulnerability Info: Type: Remote File Download Risk: Medium 2008-08-11 - Found Vulnerability 2010-05-19 - Public disclosure Vulnerability: http://site.com/Admin/ImportExport/Download.aspx?filename=../../web.conf...
Smart Douran CMS Remote File Download
Securitylab.ir Application Info: Name: Smart Douran CMS Vendor: http://smartdouran.ir Vulnerability Info: Type: Remote File Download Risk: Medium 2008-08-11 - Found Vulnerability 2010-05-19 - Public disclosure Vulnerability: http://site.com/Admin/ImportExport/Download.aspx?filename=../../web.conf...
Microsoft Group Policy File Download Detection
Binary data 5541.prm...
Microsoft Group Policy File Download Detection
Binary data 5542.prm...
Microsoft Group Policy File Download Detection
Binary data 5544.prm...