CVE-2007-3076

A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function...

ASP Folder Gallery - 'Download_Script.asp' Arbitrary File Download

source: https://www.securityfocus.com/bid/24345/info ASP Folder Gallery is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to download arbitrary files within the context of the affecte...

ASP Folder Gallery - Download_Script.asp Arbitrary File Download

ASP Folder Gallery - DownloadScript.asp Arbitrary File Download source: https://www.securityfocus.com/bid/24345/info ASP Folder Gallery is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this iss...

Microsoft Internet Explorer and Mozilla Firefox multiple security vulnerabilities

Internet Explorer race conditions allow cross domain access. Mozilla Firefox IFRAME cross domain access. Mozilla file download dialogs delay protection bypass. MSIE address bar spoofing...

Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit

No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/30/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"------------------------------------------------------------------------------------------- bZenturi ProgramChecker...

Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit

Exploit for unknown platform in category remote exploits ============================================================== Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit ============================================================== 2007/05/30...

Zenturi ProgramChecker - ActiveX File Download/Overwrite

2007/05/30 ------------------------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX sasatl.dll Arbitrary file download/overwrite Exploit url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site:...

Zenturi ProgramChecker - ActiveX File DownloadOverwrite

Zenturi ProgramChecker - ActiveX File DownloadOverwrite 2007/05/30 ------------------------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX sasatl.dll Arbitrary file download/overwrite Exploit url: http://www.programchecker.com/activeintro.aspx...

Achievo 1.1.0 - config_atkroot Remote File Inclusion

Achievo 1.1.0 - configatkroot Remote File Inclusion Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc";...

USP FOSS Distribution 1.01 - 'dnld' Remote File Disclosure

USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In /user/download.php: /user/download.php Exploit:PathUSP...

Joomla Component mosMedia <= 1.0.8 Remote File Inclusion Vulnerability

No description provided by source. - commosmedia for Mambo & Jommla = Remote File Include Vulnerability - Exloit : - /components/commosmedia/media.tab.php?mosConfigabsolutepath=r57.txt? - /components/commosmedia/media.divs.php?mosConfigabsolutepath=r57.txt? - Page Script : -...

McGallery 0.5b Arbitrary File Download Vulnerability

Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker The Am0s Team Greetz: KX-T33, kakalake, nAzGuL, Putus...

McGallery 0.5b (download.php) Arbitrary File Download Vulnerability

No description provided by source. Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker The Am0s Team...

McGallery 0.5b - 'download.php' Arbitrary File Download

Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker The Am0s Team Greetz: KX-T33, kakalake, nAzGuL, Putus...

McGallery 0.5b - download.php Arbitrary File Download

McGallery 0.5b - download.php Arbitrary File Download Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker...

McGallery 0.5b (download.php) Arbitrary File Download Vulnerability

Exploit for unknown platform in category web applications =================================================================== McGallery 0.5b download.php Arbitrary File Download Vulnerability =================================================================== Piker McGallery 0.5b Arbitrary File...

CVE-2007-1120

The 1 Import.LoadFromURL and 2 Export.asText.SaveToFile functions in TeeChart Pro ActiveX control TeeChart7.ocx allow remote attackers to download a crafted .tee file to an arbitrary location. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

pickle download local file

download local file : /Pickle/src/download.php?img=1&file=../../../../../../../../../../../../../etc/shadow&rotation=0&img=0 regards laurent gaffie...

Design/Logic Flaw

download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials...

Article System 0.1 - 'INCLUDE_DIR' Remote File Inclusion

Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus Bug in:/path/include Vul Code; requireonce "$INCLUDEDIR/classes/class.formitem.php"; POC:...