Total Commander Detection

Total Commander, a shareware file explorer for Windows, is installed on the remote host. C Tenable, Inc. include"compat.inc"; if description scriptid40926; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/09/17"; scriptnameenglish:"Total Commander Detection";...

Improper access control

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb...

CVE-2009-1495

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb...

CVE-2009-1495

CVE-2009-1495 affects Web File Explorer 3.1. The vulnerability is due to improper access control that stores sensitive information under the web root, allowing remote attackers to download the database (data/db.mdb) via a direct request. Documented impact is exposure of the database file; no reme...

CVE-2009-1495

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb...

CVE-2009-1495: Undefined Security Weakness

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb...

CVE-2009-1323

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1323

CVE-2009-1323 describes an SQL injection in Web File Explorer 3.1, where body.asp fails to sanitize the id parameter, allowing remote attackers to inject and execute arbitrary SQL commands. This is triggered via the id parameter in the request, enabling potential data disclosure or modification o...

CVE-2009-1323

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Code injection

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

CVE-2009-1314

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

CVE-2009-1314

The CVE-2009-1314 entry concerns body.asp in Web File Explorer 3.1, where the savefile action accepts a file parameter containing an executable extension, enabling remote attackers to create arbitrary files and execute arbitrary code. Affected component: Web File Explorer 3.1’s web interface (bod...

CVE-2009-1314

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

CVE-2009-1314: Undefined Security Weakness

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

CVE-2009-1323: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

tc701-traverse.txt

HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : 2K7SEPT6 Total Commander 7.01 Remote FTP Client Directory Traversal Class : Remote Directory Traversal Threat level : HIGH Discovered : 2007-08-25 Published : 2007-09-06 Credit : Gynvael Coldwind Vulnerable : 7.01 and prior == Abstra...

SUSE-SA:2006:056: gzip

The remote host is missing the patch for the advisory SUSE-SA:2006:056 gzip. The gzip tool does not handle some specific values correctly when unpacking archives. This leads to vulnerabilities like buffer overflows or infinite loops. Various different programs like mail clients, file explorer, et...

Remote File Explorer 1.0 - Denial of Service

Remote File Explorer 1.0 - Denial of Service !/usr/local/bin/perl Remote File Explorer DoS Exploit ---------------------------------------- Resolve host... OK + Connecting... OK Target locked Sending bad procedure... OK + Server DoS'ed Tested on Windows2000 SP4 Info: infamous.2hell.com $ARGC=@ARG...

Remote File Explorer <= 1.0 Denial of Service Exploit

No description provided by source. !/usr/local/bin/perl Remote File Explorer DoS Exploit ---------------------------------------- Resolve host... OK + Connecting... OK Target locked Sending bad procedure... OK + Server DoS'ed Tested on Windows2000 SP4 Info: infamous.2hell.com $ARGC=@ARGV; if $ARG...