YothCMS traversal directory vulnerability-vulnerability warning-the black bar safety net

Preferably a science and technology enterprise website management systemYothCMSis a completely open source free CMS that! YothCMS by Shijiazhuang preferably science and Technology Co., Ltd. The development of a completely open source build system, mainly for enterprises to quickly build simple,...

Adobe ColdFusion Remote Development Services Enabled Without Authentication

ColdFusion's Remote Development Services allow developers to use IDEs such as Dreamweaver to manage applications. The remote host has RDS enabled without authentication. This means that a remote attacker can read and write files on the affected system. %NASLMINLEVEL 70300 C Tenable Network...

Red Hat Enterprise Linux logrotate任意执行命令及信息泄露漏洞

CVE ID: CVE-2011-1155,CVE-2011-1154,CVE-2011-1098 logrotate程序可简化多个日志文件的管理，允许日志文件的自动循环、压缩、删除和 邮寄。 logrotate处理shred指令时存在shell命令注入漏洞，特制日志文件可造成logrotate 以运行logrotate默认root的用户权限执行任意命令。注意：默认没有启用shred指令。 logrotate在创建新日志文件时应用权限的方式中存在竞争条件漏洞，在一些特定配置 中，本地攻击者可利用此漏洞在logrotate应用最终权限之前打开新的日志文件，可导 致泄露敏感信息。...

[SECURITY] Fedora 15 Update: logrotate-3.7.9-8.fc15

The logrotate utility is designed to simplify the administration of log files on a system which generates a lot of log files. Logrotate allows for the automatic rotation compression, removal and mailing of log files. Logrotate can be set to handle a log file daily, weekly, monthly or when the log...

PPS 4.0 perl-cgi web shell

PPS 4.0 perl-cgi web shell Данная утилита предназначенна для системных администраторов для удаленного управления своим сервером. Любое незаконное использование скрипта преследуется по закону. SIZE: 55.88 KB last update - 12.07.2013 09:45 Авторизация на cookies SystemInfo - информация о сервере Fi...

Skyway Web Site Navigation System of any downloads, file deletion vulnerability and fix-vulnerability warning-the black bar safety net

Design flaws Vulnerabilityfiles: admin/addata.php Backup and Restore Database functions no management login authentication Look at the code.... case 'down': $filename or message'the file name cannot be empty'; filedown'../data/'.$ filename; break; case 'delete': unlink"../data/$GET'filenames'";...

WSO 2.5 (web shell)

Данная утилита предоставляет веб-интерфейс для удаленной работы c операционной системой и ее службами/демонами. Описание возможностей / особенности: Авторизация на cookies Информация о сервере Файловый менеджер Копирование, переименование, перемещение, удаление, чмод, тач, создание файлов и папок...

Tastydir 1.2 (1216) - Multiple Vulnerabilities

Exploit Title: Tastydir = 1216 folder creation vuln Date: Oct 17 2010 Author: R Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version: 1216 Tested on: Ubuntu 10.10 Information: Tastydir is a cross-platform PHP file management system which allows yo...

Data/File upload and management Arbitrary File Upload Vulnerability

No description provided by source. : Exploit Title: Data/File upload and management local shell upload : : Date: 14/10/2010 : : Author: saudi0hacker : : Software Link: http://resellscripts.info/index.php?route=product/product&productid=137 : : Version: All version : : Tested on: linux b0x : :...

Data/File Upload And Management Shell Upload

: Exploit Title: Data/File upload and management local shell upload : : Date: 14/10/2010 : : Author: saudi0hacker : : Software Link: http://resellscripts.info/index.php?route=product/product&productid=137 : : Version: All version : : Tested on: linux b0x : : Greetz to : All of my Friends :...

Data/File upload and management Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications =================================================================== Data/File upload and management Arbitrary File Upload Vulnerability =================================================================== : Date: 14/10/2010 : : Author:...

sFileManager <= v.24a Local File Inclusion Vulnerability

Exploit for php platform in category web applications ======================================================== sFileManager eNYe-Sec - www.enye-sec.org - www.pepelux.org ----- by the author ----- Simple File Manager SFM is a web based file management utility. It is designed to be used by those th...

sFileManager 24a - Local File Inclusion

sFileManager 24a - Local File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= sFileManager eNYe-Sec - www.enye-sec.org - www.pepelux.org ----- by the author ----- Simple File Manager SFM is a web based file management utility. It is designed to be used by those that don't wan...

[Python] CGI shell

Данная утилита предоставляет веб-интерфейс для удаленной работы c "unix-like" операционной системой. Интерфейс в стиле WSO скрин. Стандартный функционал: работа с файлами и папками, выполнение команд. "Bind port to /bin/sh" и "Back-connect" работают без создания каких-либо файлов в /tmp за счет...

Joomla! Component Front-End Article Manager System - Arbitrary File Upload

Joomla! Component Front-End Article Manager System - Arbitrary File Upload 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla Front-End Article Manager System Upload Vulnerability Date : july 4,2010 Critica...

osCommerce 2.2 - Arbitrary PHP Code Execution (Metasploit)

$Id: oscommercefilemanager.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

iphone/ipod discover the File Manager web service directory traversal vulnerability-vulnerability warning-the black bar safety net

from:Xeye Team discover is an iphone/ipod touch platform on the popular file Manager, can read pdf/office/txt format files And via wifi to share these files, a detailed description look at this: http://itunes.apple.com/us/app/discover/id292416855?mt=8 Vulnerability analysis When the wifi...

IISWorks FileMan Remote User Database Disclosure

Exploit Title: IISWorks FileMan fileman.mdb Remote User Database Disclosure Disclosure Date: July 5, 2005 Author: Known Vulnerability Software Link: http://www.scriptdungeon.com/scripts/asp/FileManASP.rar Version: OSVDB: 17824 Security Tracker ID: 1014383 Found exploited in the wild by: Joey Furr...

AjaXplorer Detection

AjaXplorer, a PHP application for managing files on a web server, is hosted on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45488; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

MMHAQ CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== MMHAQ CMS SQL Injection Vulnerability ===================================== +Title: MMHAQ CMS sqli vulnersbility +Version: only one version is released +Download:...