1080 matches found
adv20060116.txt
========================================================== Title: Directory traversal in phpXplorer Application: phpXplorer Vendor: http://www.phpxplorer.org Vulnerable Versions: 0.9.33 Bug: directory traversal Date: 16-January-2006 Author: Oriol Torrent Santiago References:...
phpXplorer XSS vuln.
phpXplorer XSS vuln. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpxplorer-xss-vuln.html vendor:http://www.phpxplorer.org/ affected version:0.9.12 and prior Product Description: phpXplorer is a free open source file management system / explor...
CVE-2005-3773
Technical details about CVE-2005-3773 are not publicly provided in the supplied documents; monitor for updates.
CVE-2005-3773: Undefined Security Weakness
Unspecified vulnerability in Joomla! before 1.0.4 has unknown impact and attack vectors, related to "Potential misuse of Media component file management functions."...
[SECURITYREASON.COM] SQL injection and XSS in paFileDB
-= SecurityReason-2005-SRA03 =- -= SQL injection and XSS in paFileDB =- Author: sp3x Date: 12 March 2005 Affected software : =================== paFileDB version : =3.1 Description : ============= paFileDB is designed to allow webmasters have a database of files for download on their site. To add...
PHPInclude.Worm - PHP Scripts Automated Arbitrary File Inclusion
PHPInclude.Worm - PHP Scripts Automated Arbitrary File Inclusion !/usr/bin/perl use LWP::Simple; use IO::Socket::INET; while1 $numr = int rand9999; $caxe = "."; $caxe1 = "."; $caxe .= rand9999; $caxe1 .= rand9999; $arq = "."; $arq = int rand9999; opensites,"$arq"; print sites ""; closesites;...
RHEL 2.1 : fileutils (RHSA-2003:016)
Updated fileutils packages are available which fix a race condition in recursive remove and move commands. The fileutils package includes a number of GNU versions of common and popular file management utilities. A race condition in recursive use of rm and mv commands in fileutils 4.1 and earlier...
Outlook Express HTML file writing
During reply to a message with HTML file attached this file is saved to known location...
tmpwatch attack
File name may be changed or deleted during temporary files removing process leaving possibility of symlink attack...
Blazix 1.2 jsp view and free protected folder access
Auriemma Luigi, PivX security advisory Application: Blazix http://www.blazix.com Version: 1.2 and previous Bug: Bad management of files requested with at the end some "bad" characters Risk low: An attacker can view jsp and other server side scripts with the ability to access any password protecte...
Symbolic links in Nautilus
No description provided...
Несанкционированный доступ к файлам в Novell Groupwise (unauthorized access)
No description provided...
Символьные линки в KTVision (symbolic link)
No description provided...
CVE-2000-0530
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files...
KDE::KApplication feature?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------ TESO Security Advisory 2000/05/29 KDE KApplication configfile vulnerability Summary =================== A bug within the KDE configuration-file management has been discovered. Due to insecure creation of configuration files via...
KDE 1.1.2 KApplication configfile - Local Privilege Escalation (1)
source: https://www.securityfocus.com/bid/1291/info The KDE configuration-file management has a bug which could result in root compromise. Due to insecure creation of configuration rc files via KApplication-class, local users can modify ownership of arbitrary files when running setuid root...
Debian 2.0/2.0 r5 / FreeBSD 3.2 / OpenBSD 2.4 / RedHat 5.2 i386 / S.u.S.E 6.1 - 'Lsof' Local Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/496/info Lsof is an open file management utility included with many linux distributions. When run setuid root or setgid kmem, it is subject to a buffer overflow that can lead to regular users gaining root priveleges. / http://www.hackersnetwork.net! / ...
CVE-1999-0596
A Windows NT log file has an inappropriate maximum size or retention period...
Expression Web 3 Service Pack 1 (KB976594)
Microsoft Expression Web 3 Service Pack 1 KB976594 contains significant fixes and improvements in publishing, SuperPreview, file management, extensibility, and other areas of the program...