CVE-2008-6382: Undefined Security Weakness

ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb...

CVE-2008-6375: Undefined Security Weakness

JBook stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to userids.mdb...

asp File Download vulnerability-vulnerability warning-the black bar safety net

1:boil the Outlook Const adTypeBinary = 1 FileName = Request. QueryString”FileName” if FileName = “” Then Response. Write “invalid file name!” Response. End End if FileExt = MidFileName, InStrRevFileName, “.” + 1 Select Case the UCaseFileExt Case “ASP”, “ASA”, “aspX”, “ASAX”, “MDB” Response. Writ...

CVE-2009-0498: Undefined Security Weakness

Virtual GuestBook vgbook 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to guestbook.mdb...

CVE-2009-0328

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

CVE-2008-5951: Undefined Security Weakness

ASP Template Creature stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for workDB/templatemonster.mdb...

CVE-2008-5935: Undefined Security Weakness

Facto stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for database/facto.mdb. NOTE: some of these details are obtained from third party information...

Symantec AppStream客户端LaunchObj ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 33247 CVECAN ID: CVE-2008-4388 Symantec AppStream是Windows的应用程序部署框架。 AppStream Windows客户端所提供的LaunchObj ActiveX控件没有安全地调用installAppMgr方式，如果用户受骗访问了恶意网页并对该方式传送了特制参数的话，就会导致向用户系统下载并执行任意代码。 Symantec AppStream Client 5.2 临时解决方法： 在IE中禁用LaunchObj ActiveX控件，为以下CLSID设置kill bit：...

DMXReady SDK 1.1 File Download

Title : DMXReady SDK = 1.1 Remote File Download Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com/productdetails.asp?mid=5&incid=11&ItemID=178 $$ : 389.97 $ Stop Attack ABD and ISRAEL !...

DMXReady SDK <= 1.1 Remote File Download Vulnerability

No description provided by source. Title : DMXReady SDK = 1.1 Remote File Download Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com/productdetails.asp?mid=5&incid=11&ItemID=178 $$ : 389.97 $ Stop Attack ABD and ISRAEL !...

Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute

This module exploits a vulnerability in Symantec AppStream Client 5.x. The vulnerability is in the LaunchObj ActiveX control launcher.dll 5.1.0.82 containing the "installAppMgr" method. The insecure method can be exploited to download and execute arbitrary files in the context of the currently...

DMXReady SDK <= 1.1 Remote File Download Vulnerability

Exploit for unknown platform in category web applications ====================================================== DMXReady SDK = 1.1 Remote File Download Vulnerability ====================================================== Title : DMXReady SDK = 1.1 Remote File Download Vulnerability Author : ajan...

DMXReady SDK 1.1 - Arbitrary File Download

DMXReady SDK 1.1 - Arbitrary File Download Title : DMXReady SDK = 1.1 Remote File Download Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com/productdetails.asp?mid=5&incid=11&ItemID=178 $$ : 389.97 $ Stop Attack ABD and ISRAEL !...

DMXReady SDK 1.1 - Arbitrary File Download

Title : DMXReady SDK = 1.1 Remote File Download Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com/productdetails.asp?mid=5&incid=11&ItemID=178 $$ : 389.97 $ Stop Attack ABD and ISRAEL !...

ExcelOCX ActiveX 3.2 (Download File) Insecure Method Exploit

No description provided by source. html body / --=0-0-000000000--x==-xxxxxxxxxbr/ - Excel Viewer OCX 3.2 br/ homepage: www.officeocx.com br/ download: www.brothersoft.com/excel-viewer-ocx-51797.html br/ - RegKey Safe for Script: Truebr/ - RegKey Safe for Init: True br/ - Implements IObjectSafety:...

ExcelOCX 3.2 Insecure Method

/ --=0-0-000000000--x==-xxxxxxxxx - Excel Viewer OCX 3.2 homepage: www.officeocx.com download: www.brothersoft.com/excel-viewer-ocx-51797.html - RegKey Safe for Script: True - RegKey Safe for Init: True - Implements IObjectSafety: True - IDisp Safe: Safe for untrusted: caller,data - IPersist Safe...

ExcelOCX ActiveX 3.2 - Download File Insecure Method

ExcelOCX ActiveX 3.2 - Download File Insecure Method / --=0-0-000000000--x==-xxxxxxxxx - Excel Viewer OCX 3.2 homepage: www.officeocx.com download: www.brothersoft.com/excel-viewer-ocx-51797.html - RegKey Safe for Script: True - RegKey Safe for Init: True - Implements IObjectSafety: True - IDisp...

CVE-2008-5899: Undefined Security Weakness

CodeAvalanche FreeForAll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CAFFAPage.mdb. NOTE: some of these details are obtained fro...

CVE-2008-5898: Undefined Security Weakness

CodeAvalanche Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CADirectory.mdb. NOTE: some of these details are obtained fr...

CVE-2008-5896: Undefined Security Weakness

CodeAvalanche RateMySite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the administrator password via a direct request for private/CARateMySite.mdb. NOTE: some of these details are obtained...