phpMUR - Remote File Disclosure

phpMUR - Remote File Disclosure Exploit Title: phpMUR Remote File Disclosure Date: 10/08/2010 Author: Offensive [email protected] Red-Stone On Inject0r Community ! Software Link: http://sourceforge.net/projects/phpmur Version : n/a Tested on: Windows XP C0nditi0ns : PHP Version 4.x.x Exploit Co...

phpMUR - Remote File Disclosure

Exploit Title: phpMUR Remote File Disclosure Date: 10/08/2010 Author: Offensive [email protected] Red-Stone On Inject0r Community ! Software Link: http://sourceforge.net/projects/phpmur Version : n/a Tested on: Windows XP C0nditi0ns : PHP Version 4.x.x Exploit Code :...

EZ-Oscommerce 2.1 Cross Site Request Forgery / File Disclosure

==================================================== EZ-Oscommerce 2.1 File Disclosure Vulnerabilities EZ-Oscommerce 2.1 Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

Digistore Ecommerce 4.0 File Disclosure / Backup Disclosure

==================================================== Digistore Ecommerce V4.0 File Disclosure Vulnerabilities Digistore Ecommerce V4.0 by Pass / Creat and Download Backup Vulnerability ====================================================...

Mongoose Slash Character Remote File Disclosure Vulnerability

Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may aid in further attacks. This issue affects Mongoose 2....

Mongoose Web Server <= 2.8 Slash Character Remote File Disclosure Vulnerability

Mongoose Web Server is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Digistore Ecommerce V4.0 FCKeditor Remote Upload File / File Disclosure

Exploit for php platform in category web applications ======================================================================= Digistore Ecommerce V4.0 FCKeditor Remote Upload File / File Disclosure =======================================================================...

EZ-Oscommerce 3.1 Remote File Upload / File Disclosure

Exploit for php platform in category web applications ====================================================== EZ-Oscommerce 3.1 Remote File Upload / File Disclosure ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

EZ-Oscommerce 2.1 Changer Login and Pass CSRF / File Disclosure

Exploit for php platform in category web applications =============================================================== EZ-Oscommerce 2.1 Changer Login and Pass CSRF / File Disclosure ===============================================================...

ezRESERVATION Remote File Upload / File Disclosure

Exploit for php platform in category web applications ================================================== ezRESERVATION Remote File Upload / File Disclosure ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

ezAPPAREL File Disclosure / Shell Upload / Backup Related

==================================================== ezAPPAREL File Disclosure Vulnerabilities ezAPPAREL by Pass / Creat and Download Backup Vulnerability ezAPPAREL Remote File Upload ====================================================...

File inputs can disclose the path to selected files

When a file is selected in a file upload input, the path to that file is not exposed through the input's value property. This is done to protect any sensitive information which may be contained in the directory names. When manipulated by DOM this information should also not be exposed. Certain DO...

Joomla Component com_jcafe local File/Path / Cookie Disclosure

Exploit for php platform in category web applications ============================================================== Joomla Component comjcafe local File/Path / Cookie Disclosure ============================================================== There is a vulnerability in the Joomla comjcafe which...

Kerio Connect < 7.0.0 Products Administration Console File Disclosure and Corruption Vulnerabilities

According to its banner, the remote host is running a version of Kerio Connect or Kerio MailServer as it was formerly known prior to 7.0.0. Successful exploitation of remote file disclosure and corruption vulnerabilities in the administration console of such versions could allow an attacker to...

Solaris KCMS + TTDB Arbitrary File Read

This module targets a directory traversal vulnerability in the kcmsserver component from the Kodak Color Management System. By utilizing the ToolTalk Database Server's TTISBUILD procedure, an attacker can bypass existing directory traversal validation and read arbitrary files. Vulnerable systems...

The Uploader 2.0.4 File Disclosure

================================================= The Uploader 2.0.4 Remote File disclosure Vulnerability ================================================= ============================================== Script Name : The Uploader Version : 2.0.4 Language : php Author : Xa7m3d [email protected]...

The Uploader 2.0.4 - Remote File Disclosure

The Uploader 2.0.4 - Remote File Disclosure ================================================= The Uploader 2.0.4 Remote File disclosure Vulnerability ================================================= ============================================== Script Name : The Uploader Version : 2.0.4 Languag...

The Uploader 2.0.4 - Remote File Disclosure

================================================= The Uploader 2.0.4 Remote File disclosure Vulnerability ================================================= ============================================== Script Name : The Uploader Version : 2.0.4 Language : php Author : Xa7m3d [email protected]...

The Uploader 2.0.4 Remote File disclosure Vulnerability

Exploit for php platform in category web applications ======================================================= The Uploader 2.0.4 Remote File disclosure Vulnerability ======================================================= Script Name : The Uploader Version: 2.0.4 Language : php Author : Xa7m3d...

TitanFtp Server File Disclosure

Accensus Security Advisory L-02 TitanFtp Server Arbitrary File Disclosure Details ============= Product: TitanFTP Server Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...