73 matches found
ScriptsEz Easy Image Downloader Local File Download Vulnerability
No description provided by source. ScriptsEz Easy Image Downloader Local File Download Vulnerability url: http://www.scriptsez.net/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at...
pPIM 1.01 (notes.php id) Local File Inclusion Vulnerability
No description provided by source. pPIM 1.01 notes.php id Local File Inclusion Vulnerability url: http://www.phlatline.org/docs/files/ppim.zip Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose...
CVE-2004-1603
cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to 1 read arbitrary files via the backup feature or 2 chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled...
Debian DSA-655-1 : zhcon - missing privilege release
Erik Sjolund discovered that zhcon, a fast console CJK system using the Linux framebuffer, accesses a user-controlled configuration file with elevated privileges. Thus, it is possible to read arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
[SA13769] Zeroboard "dir" File Inclusion Vulnerability
TITLE: Zeroboard "dir" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA13769 VERIFY ADVISORY: http://secunia.com/advisories/13769/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Zeroboard 4.x http://secunia.com/product/4457/ DESCRIPTION: Optik4Lab has reported a...
PHP-Ping php-ping.php count Parameter Arbitrary Command Execution
The remote host appears to be running 'php-ping.php' from TheWorldsEnd.NET. The remote version of this script does not properly sanitize the 'count' parameter and allows attackers to execute arbitrary commands or read arbitrary files on the remote host subject to the privileges of the web server...
Wordit Logbook Version 0.98b3
Wordit Limited 2000. http://scripts.wordit.com/ User can read any files and execute any commands. Example: www.idontknowperl.com/logbook.pl? file=../../../../../../../bin/cat20logbook.pl00| / Alexey Sintsov aka DonHuan irc.megik.net brrr / include best/regards.h...
sendmail.php.txt
Sequoiasoft's sendmail php script dangerous - By jwilkins PHP-Nuke Written by Sequioa Software, this script allows execution of arbitrary code by a malicious user. Written by Sequioa Software, this script allows execution of arbitrary code by a malicious user. Essentially, popen executes a shell...
SIX-webboard 2.01 "show files" vulnerability
a little bit late, but "it's better late than never"! -------------- PoizonB0x Advisory1 pb0x-07-07-2001 - --------------- -NAME: SIX-webboard 2.01 "show files" vulnerability. -DESCRIPTION: Little, but very popular webboard coded by Pipo [email protected]. Find more information about the...
S21SEC-003: Vulnerabilities in CommuniGate Pro v3.2.4
ID: S21SEC-003-en Title: Vulnerabilities in Stalker's CommuniGate Pro v3.2.4 Date: 03/04/2000 Status: Vendor contacted Scope: Remote command execution as superuser Platforms: Linux, probably others Author: llmora, fjserna Location: http://www.s21sec.com/en/avisos/s21sec-003-en.txt Release: Public...
sawmill5.0.21 old path bug & weak hash algorithm
Aleph1, Greetings, I did not see this in the archives so I figured I would forward it on. Vendor: Notified. Link: http://www.flowerfire.com/sawmill SawMill is a site log statistics package for UNIX, Windows and MacOS. I have been evaluating it under Linux. In my test configuration I have sawmill...
cgimail.txt
Advisory: CGIMailer v3.01 for Windows 95/98/2000/NT4.0 Chopsui-cideMmM The Mad Midget Mafia - http://midgets.box.sk/ ======================================================================= Summary: ========== Date released: 15/03/2000 dd/mm/yyyy. Risk: reading of private files. Vulnerability foun...
