CVE-2007-6214

Directory traversal vulnerability in include/filedownload.php in LearnLoop 2.0 beta7 allows remote attackers to read arbitrary files via a .. dot dot in the sFilePath parameter. NOTE: exploitation requires that the product is configured, but has zero files in the database...

Eurologon CMS files.php任何文件下载漏洞

Eurologon CMS是一款基于PHP的WEB应用程序。 Eurologon CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限下载任意文件，获得敏感信息。 问题是由于'files.php'脚本对用户提交的'file'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限下载任意文件，获得敏感信息。 Eurologon CMS 目前没有详细解决方案提供： http://www.eurologon.com/...

LearnLoop 2.0beta7 - sFilePath Remote File Disclosure

LearnLoop 2.0beta7 - sFilePath Remote File Disclosure LearnLoop 2.0beta7 sFilePath Remote File Disclosure Vulnerability http://surfnet.dl.sourceforge.net/sourceforge/learnloop/learnloop2.0beta7.tar.gz POC : /include/filedownload.php?sFilePath=../../../../../../../etc/passwd milw0rm.com 2007-11-29...

eurologon-disclose.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Eurologon...

Eurologon CMS files.php Arbitrary File Download Vulnerability

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

Eurologon CMS - files.php Arbitrary File Download

Eurologon CMS - files.php Arbitrary File Download --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Eurologon CMS - 'files.php' Arbitrary File Download

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Eurologon...

Eurologon CMS files.php Arbitrary File Download Vulnerability

Exploit for unknown platform in category web applications ============================================================= Eurologon CMS files.php Arbitrary File Download Vulnerability =============================================================...

patbb-rfi.txt

Link to download: http://www.php-tools.net/site.php?file=patBBCode/overview.xml Vuln file: examples\patExampleGen\bbcodeSource.php Vuln code: if !isset $GET'example' die 'No example selected.' ; $exampleId = $GET'example'; obstart; // make the example think it's still in the right place chdir '.....

CVE-2007-5777

Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb...

CVE-2007-5787

Micro Login System 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a password via a direct request for userpwd.txt...

[Vulz] eLouai's Download Script Remote File Download Vulnerability

Software : eLuisa's Download Script Bug found by : Xcross87 Xploit : http://victim.com/downloadfile.php?file=filepath Sample : http://victim.com/downloadfile.php?file=index.php http://victim.com/downloadfile.php?file=/include/config.php === Xcross87 | HCETeam Xploiter | HCEGroup.Vn ===...

koreanghboard-multi.txt

Software : Korean GHBoard Site : http://www.ghlab.com/ Found by : Xcross87 1. File Upload Vulnerability Xploit : victim.com/ghboard/component/upload.jsp 2. FlashUpload component File Upload and File Download Vulnerability Upload Xploit : victim.com/ghboard/component/flashupload/upload.html Not...

Microsoft Internet Explorer扩展过滤器绕过任意文件下载漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer不正确处理用户输入，远程攻击者可以利用漏洞下载任意文件，但不能执行。 由于扩展过滤器处理扩展文件存在问题，构建恶意扩展，并诱使用户访问，可导致任意文件被下载，但根据调查，此下载文件会提示非法格式错误而不能执行。 Microsoft Internet Explorer 7.0.5730 .11 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft...

Cross site scripting

Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...

CVE-2007-5456

Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...

CVE-2007-5456

Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...

Pindorama 0.1 client.php Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ Pindorama 0.1 client.php Remote File Inclusion Vulnerability ============================================================ \|/// \ - - // Xmors Underground Group @ @...

Information disclosure

Unspecified vulnerability in preview.php in TYPOlight webCMS 2.4.6 allows remote attackers to download arbitrary files via the src parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-5318

Unspecified vulnerability in preview.php in TYPOlight webCMS 2.4.6 allows remote attackers to download arbitrary files via the src parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...