685 matches found
PHPXplorer 0.9.33 - 'action.php' Directory Traversal
source: https://www.securityfocus.com/bid/16292/info phpXplorer is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...
EFileGo 3.0 - Multiple Input Validation Vulnerabilities
EFileGo 3.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16124/info eFileGo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these...
AMSN instant messenger data spoofing
Port with predictable number is open for file retrieval without check for peer IP address...
PHP Upload Center - index.php Directory Traversal
PHP Upload Center - index.php Directory Traversal source: https://www.securityfocus.com/bid/15621/info PHP Upload Center is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. An attacker can exploit this issue to retrieve arbitrary...
Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== Coppermine Photo Gallery By DiGiTALMiDWAY import urllib2, sys from urllib import urlencode import zipfile iflensys.argv2: print 'usage : %s http://host/Path/...
Coppermine Photo Gallery 1.3.2 - File Retrieval / SQL Injection
tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good cookie : By DiGiTALMiDWAY import...
Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection
Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use...
Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
No description provided by source. tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good...
thttpd ssi file retrieval
The remote HTTP server allows an attacker to read arbitrary files on the remote web server, by employing a weakness in an included ssi package, by prepending pathnames with %2e%2e/ hex-encoded ../ to the pathname. Example: GET /cgi-bin/ssi//%2e%2e/%2e%2e/etc/passwd will return /etc/passwd...
File Disclosure in SurgeLDAP
There is a vulnerability in the current version of SurgeLDAP that allows an attacker to retrieve arbitrary files from the webserver that reside outside the bounding HTML root directory. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources,...
Web Shopper Remote File Retrieval Vulnerability - Active Check
Byte SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10533";...
eXtropia Web Store Remote File Retrieval Vulnerability - Active Check
eXtropia SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10532";...
Oracle 9i Application Server SOAP Configuration File Accessible - Active Check
In a default installation of Oracle 9i Application Server AS v.1.0.2.2.1, it is possible to access some configuration files. These file includes detailed information on how the product was installed in the server including where the SOAP provider and service manager are located as well as...
vqServer administrative port
vqSoft's vqServer administrative port is open. Brute force guessing of the username/password is possible, and a bug in versions 1.9.9 and below allows configuration file retrieval remotely. For more information, see:...
IMAP arbitrary file retrieval
The target is running an IMAP daemon that allows an authenticated user to retrieve and manipulate files that would be available to that user via a shell. If IMAP users are denied shell access, you may consider this a vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text...
IMAP arbitrary file retrieval
The target is running an IMAP daemon that allows an authenticated user to retrieve and manipulate files that would be available to that user via a shell. If IMAP users are denied shell access, you may consider this a vulnerability. OpenVAS Vulnerability Test $Id: imaparbitraryfileretrieval.nasl...
Boa Web Server File Disclosure Vulnerability (Oct 2000) - Active Check
The Boa Web Server is prone to a file disclosure vulnerability. SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Anaconda Double NULL Encoded Remote File Retrieval
The remote Anaconda Foundation Directory contains a flaw that allows anyone to read arbitrary files with root super-user privileges. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Poll It v2.0 cgi
'PollItSSIv2.0.cgi SPDX-FileCopyrightText: 2000 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10459";...
Avotus CDR mm File Retrieval Attempt
The script attempts to force the remote Avotus CDR mm service to include the file /etc/passwd across the network. SPDX-FileCopyrightText: 2004 Anonymous Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...