Lucene search
+L

834 matches found

NVD
NVD
•added 2011/12/15 3:57 a.m.•22 views

CVE-2011-4831

Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f encoded dot dot in the file parameter in a download action...

4CVSS6.2AI score0.0263EPSS
SaveExploits2References1
Prion
Prion
•added 2011/12/15 3:57 a.m.•21 views

Directory traversal

Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f encoded dot dot in the file parameter in a download action...

4CVSS6.7AI score0.0263EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2011/12/15 2:00 a.m.•43 views

CVE-2011-4831

Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f encoded dot dot in the file parameter in a download action...

6.2AI score0.0263EPSS
SaveExploits2References1
CVE
CVE
•added 2011/12/15 2:00 a.m.•53 views

CVE-2011-4831

CVE-2011-4831 affects Web File Browser prior to 0.4b14. The webFileBrowser.php download action is vulnerable to a directory traversal via an encoded dot-dot (%2f) in the file parameter, allowing remote authenticated users to read arbitrary files. Reported impact from sources indicates partial con...

4CVSS6.4AI score0.0263EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/12/15 12:00 a.m.•3 views

CVE-2011-4831: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in webFileBrowser.php in Web File Browser 0.4b14 allows remote authenticated users to read arbitrary files via a ..%2f encoded dot dot in the file parameter in a download action...

4CVSS6AI score0.0263EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2011/11/08 12:00 a.m.•19 views

Web File Browser <= 0.4b14 File Download Vulnerability - Active Check

Web File Browser is prone to file download vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4CVSS6.7AI score0.0263EPSS
SaveExploits2References2
Exploit DB
Exploit DB
•added 2011/11/03 12:00 a.m.•50 views

Web File Browser 0.4b14 - File Download

Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link: http://downloads.sourceforge.net/project/webfilebrowser/webfilebrowser/0.4b14/webfilebrowser-0.4b14.zip Version: Web File Browser 0.4b14 Tested...

4CVSS5.2AI score0.0263EPSS
SaveExploits2
exploitpack
exploitpack
•added 2011/11/03 12:00 a.m.•19 views

Web File Browser 0.4b14 - File Download

Web File Browser 0.4b14 - File Download Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link: http://downloads.sourceforge.net/project/webfilebrowser/webfilebrowser/0.4b14/webfilebrowser-0.4b14.zip...

7.4AI score
SaveExploits0
NVD
NVD
•added 2011/08/23 9:55 p.m.•27 views

CVE-2011-2651

Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename...

7.5CVSS7.5AI score0.02657EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2011/08/23 9:00 p.m.•36 views

CVE-2011-2651

Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename...

7.5AI score0.02657EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/08/23 12:00 a.m.•3 views

CVE-2011-2651: Undefined Security Weakness

Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename...

7.5CVSS6.5AI score0.02657EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2011/07/15 9:27 a.m.•16 views

Armitage 07.12.11 - Updated Version

Armitage 07.12.11 - Updated Version Armitage is a graphical cyber attack management tool for Metasploit that visualizes your targets, recommends exploits, and exposes the advanced capabilities of the framework. Armitage aims to make Metasploit usable for security practitioners who understand...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/07/15 9:27 a.m.•13 views

Armitage 07.12.11 - Updated Version

Armitage 07.12.11 - Updated Version Armitage is a graphical cyber attack management tool for Metasploit that visualizes your targets, recommends exploits, and exposes the advanced capabilities of the framework. Armitage aims to make Metasploit usable for security practitioners who understand...

6.6AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2011/05/13 12:00 a.m.•49 views

Web File Browser 0.4b14 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

SaveExploits0
zdt
zdt
•added 2011/05/13 12:00 a.m.•54 views

Web File Browser 0.4b14 => File[Shell]upload / Information Disclosure

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2010/06/26 12:00 a.m.•58 views

PHP-Nuke 8.2 - Arbitrary File Upload

Title : PHPnuke 8.2 Remote Upload File Exploit Author : Net.Edit0r Location : Iran Dork : "POWERED BY PHPNUKE.IR" Category : Remote Email : [email protected] [email protected] Special Thanks To :NetQurd For help in finding bugs Email :[email protected] InformatioN 1.Save code html format...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2010/01/01 12:00 a.m.•23 views

FileNice File Browser RFI / LFI

FileNice file browser RFI&LFI By: e.wiZz! Script site: http://filenice.com In the wild... Vulnerability: index.php ... ifisset$GET'view' ifsubstr$GET'view',0,2 != ".." && substr$GET'view',0,1 != "/" && $GET'view' != "./" && !stristr$GET'view', '../' $out = new FNOutput; $out-viewFile$GET'view';...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/12/31 12:00 a.m.•31 views

fileNice php file browser RFI and LFI Vulnerabilities

No description provided by source. FileNice file browser RFI&LFI By: e.wiZz! Script site: http://filenice.com In the wild... Vulnerability: index.php ... ifisset$GET'view' ifsubstr$GET'view',0,2 != ".." && substr$GET'view',0,1 != "/" && $GET'view' != "./" && !stristr$GET'view', '../' $out = new...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/12/31 12:00 a.m.•13 views

fileNice PHP file browser - LocalRemote File Inclusion

fileNice PHP file browser - LocalRemote File Inclusion FileNice file browser RFI&LFI By: e.wiZz! Script site: http://filenice.com In the wild... Vulnerability: index.php ... ifisset$GET'view' ifsubstr$GET'view',0,2 != ".." && substr$GET'view',0,1 != "/" && $GET'view' != "./" && !stristr$GET'view'...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/07/28 12:00 a.m.•25 views

TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities

TinyBrowser TinyMCE Editor File browser 1.41.6 - Multiple Vulnerabilities ============================================================================== TinyBrowser TinyMCE Editor File browser 1.41.6 - Multiple Vulnerabilities...

7.6AI score
SaveExploits0
Rows per page
Query Builder