CVE-2010-3092

The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a file by uploading a different file with a similar...

CVE-2010-3092

CVE-2010-3092 affects Drupal 5.x before 5.23 and 6.x before 6.18. The issue arises in the upload module due to improper case-insensitive filename handling in a database configuration, allowing remote authenticated users to bypass file-download restrictions by uploading a differently named file wi...

CVE-2010-3092: Undefined Security Weakness

The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a file by uploading a different file with a similar...

Snapshot Viewer for Microsoft Access - ActiveX Control Arbitrary File Download (Metasploit)

$Id: ms08041snapshotviewer.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : wget vulnerability (USN-982-1)

It was discovered that Wget would use filenames provided by the server when following 3xx redirects. If a user or automated system were tricked into downloading a file from a malicious site, a remote attacker could create the file with an arbitrary name e.g. .wgetrc, and possibly run arbitrary...

Fedora 14 : drupal-6.19-1.fc14 (2010-13031)

DRUPAL-SA-CORE-2010-002 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script, for each site. Advisory ID: DRUPAL-SA-CORE-2010-002 Project: Drupal core Version: 5.x, 6.x Date:...

Opera file download dialog spoofing

It's possible to place windows on the top of file download dialog and to close it right before user's click...

Fedora 13 : drupal-6.19-1.fc13 (2010-12753)

DRUPAL-SA-CORE-2010-002 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script, for each site. Advisory ID: DRUPAL-SA-CORE-2010-002 Project: Drupal core Version: 5.x, 6.x Date:...

SA-CORE-2010-002 - Drupal core - Multiple vulnerabilities

Multiple vulnerabilities and weaknesses were discovered in Drupal. OpenID authentication bypass The OpenID module provides users the ability to login to sites using an OpenID account. The OpenID module doesn't implement all the required verifications from the OpenID 2.0 protocol and is vulnerable...

Akamai Download Manager arbitrary file download & execution

------------------------------------------------------------------------ Akamai Download Manager arbitrary file download & execution ------------------------------------------------------------------------ Yorick Koster, April 2009...

Akamai Download Manager Arbitrary Download / Execution

------------------------------------------------------------------------ Akamai Download Manager arbitrary file download & execution ------------------------------------------------------------------------ Yorick Koster, April 2009...

Yahoo Messenger WScript.Shell ActiveX control command execution

Added: 07/29/2010 Background Yahoo! Messenger is an instant messaging application. It includes the WScript.Shell ActiveX control. Problem The Execute method of the WScript.Shell ActiveX control allows command execution when a malicious web page is loaded in Internet Explorer. Resolution Set the...

Yxbbs Forum system 3.1.0 filename parameter arbitrary File Download vulnerability and fix-vulnerability warning-the black bar safety net

Affected version: Ver 3.1.0 vulnerability description: Yxbbs by the Y network developed a set of open source free Community Forum system program, using asp+Access SQL technical. ViewFile. Asp in the filename parameter does not have to verify and filter processing, there is a serious security issu...

Joomla Component com_soundset LFI Vulnerability

Exploit for php platform in category web applications =============================================== Joomla Component comsoundset LFI Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Podcast Generator 'download.php' Directory Traversal Vulnerability

Podcast Generator is prone to a directory-traversal vulnerability because it fails to sufficiently validate user-supplied input data. Exploiting the issue can allow an attacker to obtain sensitive information that may aid in further attacks. Podcast Generator 1.3 running on Windows is vulnerable;...

WordPress Plugin Firestats - Remote Configuration File Download

WordPress Plugin Firestats - Remote Configuration File Download Exploit Title: Wordpress firestats remote configuration file download Date: 2010-07-09 Author: Jelmer de Hen Software Link: http://firestats.cc/ Version: 1.6.5 Tested on: PHP Do a simple GET request to this file:...

WordPress Plugin Firestats - Remote Configuration File Download

Exploit Title: Wordpress firestats remote configuration file download Date: 2010-07-09 Author: Jelmer de Hen Software Link: http://firestats.cc/ Version: 1.6.5 Tested on: PHP Do a simple GET request to this file: /wp-content/plugins/firestats/php/tools/getconfig.php This will allow you to downloa...

Internet Explorer File Download Dialog Box Manipulation (MS05-054; CVE-2005-2829)

Microsoft Internet Explorer IE is a web browser application capable of downloading and displaying various Internet resources. With IE, a user can download files from network servers using various protocols such as HTTP and FTP. IE can parse and display HTML pages and image files by itself. For...

Yxbbs Forum system Ver 3.1.0 multiple vulnerabilities-vulnerability warning-the black bar safety net

Yxbbs by the Y network developed a set of open source free Community Forum system program, using asp+Access SQL technical. Speed: the use of currently the more popular caching technology, which greatly accelerates the forum access speed Function: although the function can not be and dynamic netwo...

PHP168 V6 download any file vulnerability-vulnerability warning-the black bar safety net

漏洞 文件 download.php Vulnerability related to the file HASH b912249a22b630c04f7ad65f8ba5a2f6 download.php $url=base64decode$url; //2 line 7 $fileurl=strreplace$webdbwwwurl,"",$url; if eregi". php$",$fileurl && isfilePHP168PATH."$ fileurl" //determine the file drop out is not php, if it is php, and...