Lucene search
K

3141 matches found

Zero Day Initiative
Zero Day Initiative
added 2007/12/17 12:0 a.m.25 views

St. Bernard Open File Manager Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of St. Bernard Open File Manager. Authentication is not required to exploit this vulnerability. The specific flaw resides in the Open File Manager service, ofmnt.exe, which listens by default on a random TCP...

10CVSS3.3AI score0.06614EPSS
Exploits0
Fedora
Fedora
added 2007/12/15 7:31 p.m.11 views

[SECURITY] Fedora 8 Update: Thunar-0.9.0-2.fc8

Thunar is a new modern file manager for the Xfce Desktop Environment. It has been designed from the ground up to be fast and easy-to-use. Its user interface is clean and intuitive, and does not include any confusing or useless options. Thunar is fast and responsive with a good start up time and...

1.3AI score
Exploits0
Fedora
Fedora
added 2007/12/15 7:31 p.m.18 views

[SECURITY] Fedora 8 Update: xfce4-fsguard-plugin-0.4.0-2.fc8

A little Xfce plugin, which checks the free space on the chosen mountpoint frequently. It displays 4 different icons and a message box, depending on t he free space. The amount of free disk space is visible in a tooltip. If you left-click on its icon, it opens the mountpoint directory in the file...

1.7AI score
Exploits0
Fedora
Fedora
added 2007/12/15 7:29 p.m.11 views

[SECURITY] Fedora 7 Update: Thunar-0.9.0-2.fc7

Thunar is a new modern file manager for the Xfce Desktop Environment. It has been designed from the ground up to be fast and easy-to-use. Its user interface is clean and intuitive, and does not include any confusing or useless options. Thunar is fast and responsive with a good start up time and...

1.3AI score
Exploits0
Fedora
Fedora
added 2007/11/29 1:48 a.m.15 views

[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-7.fc8

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

1AI score
Exploits0
Prion
Prion
added 2007/11/01 4:46 p.m.16 views

Design/Logic Flaw

index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message...

5CVSS6.7AI score0.02603EPSS
Exploits0References3
Prion
Prion
added 2007/11/01 4:46 p.m.11 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter...

4.3CVSS7.4AI score0.00876EPSS
Exploits0References3
NVD
NVD
added 2007/11/01 4:46 p.m.23 views

CVE-2007-5773

Cross-site request forgery CSRF vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter...

4.3CVSS6.9AI score0.00876EPSS
Exploits0References3
NVD
NVD
added 2007/11/01 4:46 p.m.14 views

CVE-2007-5774

index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message...

5CVSS6.1AI score0.02603EPSS
Exploits0References3
Cvelist
Cvelist
added 2007/11/01 4:4 p.m.20 views

CVE-2007-5774

index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message...

6.1AI score0.02603EPSS
Exploits0References3
CVE
CVE
added 2007/11/01 4:4 p.m.46 views

CVE-2007-5774

CVE-2007-5774 affects the File Manager module of Flatnuke 3. An error condition triggered by an invalid argumentname in a disc op action allows remote attackers to disclose the server path via an error message. The provided connected resources confirm the vulnerability description but do not spec...

5CVSS6.2AI score0.02603EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2007/11/01 4:4 p.m.53 views

CVE-2007-5773

CSRF in the File Manager module (index.php) of Flatnuke 3 allows remote attackers to perform administrative actions via forged requests that include the dir parameter (pathname) and the ffile parameter (filename). The vulnerability originates from the module’s index.php handling of these paramete...

4.3CVSS6.9AI score0.00876EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2007/11/01 4:4 p.m.22 views

CVE-2007-5773

Cross-site request forgery CSRF vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter...

6.9AI score0.00876EPSS
Exploits0References3
seebug.org
seebug.org
added 2007/10/24 12:0 a.m.11 views

Flatnuke 3 Remote Command Execution / Privilege Escalation

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2007/10/23 12:0 a.m.11 views

Flatnuke 3 - Remote Command Execution Privilege Escalation

Flatnuke 3 - Remote Command Execution Privilege Escalation --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

0.9AI score
Exploits0
Packet Storm
Packet Storm
added 2007/10/23 12:0 a.m.23 views

flatnuke3-fm.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flatnuke 3...

7.4AI score
Exploits0
0day.today
0day.today
added 2007/10/23 12:0 a.m.22 views

Flatnuke 3 Remote Command Execution / Privilege Escalation

Exploit for unknown platform in category web applications ========================================================== Flatnuke 3 Remote Command Execution / Privilege Escalation ========================================================== --------------------------------------------------------------...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2007/10/23 12:0 a.m.30 views

Flatnuke 3 - Remote Command Execution / Privilege Escalation

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flatnuke 3...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2007/10/22 12:0 a.m.23 views

Flatnuke3 File Manager Module - Unauthorized Access

Flatnuke3 File Manager Module - Unauthorized Access source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2007/10/22 12:0 a.m.18 views

Flatnuke3 File Manager Module - Unauthorized Access

source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can exploit this vulnerability to gain administrative contro...

7.4AI score
Exploits0
Rows per page
Query Builder