ISPworker 1.23 - Remote File Disclosure

ISPworker 1.23 - Remote File Disclosure Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 http://target/path/module/ticket/download.php?filename=../../../../../../../../../etc/passwd...

ISPworker 1.23 - Remote File Disclosure

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 http://target/path/module/ticket/download.php?filename=../../../../../../../../../etc/passwd 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo /...

Elxis CMS File Disclosure

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Elxis CMS Local File Disclosure Vulnerability Script Site : http://www.elxis.org Code : contentType."; charset=".$this-encoding; line 640 Header"Content-Disposition: inline; filename=".basename$filename; line 641 readfile$filename, "r"; line 642 di...

Adobe JRun 4 Server File Disclosure (CVE-2004-0928)

Adobe JRun is an application server used to deploy J2EE Java 2 Enterprise Edition applications, JSPs Java Server Pages, and other Java applications. It can be used as a stand-alone web server or can be accessed through other web servers including IIS and Apache. With IIS, JRun can be registered t...

USN-859-1: OpenJDK vulnerabilities

Dan Kaminsky discovered that SSL certificates signed with MD2 could be spoofed given enough time. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation in...

[MORNINGSTAR-2009-02] Multiple security issues in Cute News and UTF-8 Cute News

MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Cute News and UTF-8 Cute News 1. Advisory Information ------------------------------------------------------------------------------------------------------------------------ Title: Multiple security...

CVE-2009-3884

CVE-2009-3884 is an information-leak vulnerability in the TimeZone.getTimeZone handling for zoneinfo files used by Sun Java/OpenJDK JRE/OpenJDK (Sun JRE 5.0/6, Update 22/17 or prior, and OpenJDK). The issue allows a remote attacker to probe the local filesystem by observing how tz files are proce...

PHP 5.3.0 pdflib file disclosure

Exploit for unknown platform in category web applications ================================ PHP 5.3.0 pdflib file disclosure ================================ Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- ...

PHP 5.3.0 pdflib file disclosure

No description provided by source. Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- ?php // Author : Sina Yazdanmehr R3d.W0rm ; Our Site : http://IrCrash.com if!extensionloaded'pdf' die'pdf extension requir...

Sahana 'mod' Parameter Local File Disclosure Vulnerability

Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further...

Sahana 'mod' Parameter Local File Disclosure Vulnerability

Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sahana 0.6.2 - mod Local File Disclosure

Sahana 0.6.2 - mod Local File Disclosure source: https://www.securityfocus.com/bid/36826/info Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive informatio...

Sahana 0.6.2 - 'mod' Local File Disclosure

source: https://www.securityfocus.com/bid/36826/info Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running t...

Vivvo CMS 4.1.5.1 file disclosure

Exploit for unknown platform in category web applications ================================= Vivvo CMS 4.1.5.1 file disclosure ================================= Description of vulnerable software: Vivvo CMS is an intuitive content management system atop a powerful programming framework, empowering...

Vivvo CMS 4.1.5.1 file disclosure

No description provided by source. waraxe-2009-SA075 - Remote File Disclosure in Vivvo CMS 4.1.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 21. October 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-75.html...

Vivvo CMS 4.1.5.1 - file Disclosure

Vivvo CMS 4.1.5.1 - file Disclosure waraxe-2009-SA075 - Remote File Disclosure in Vivvo CMS 4.1.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 21. October 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-75.htm...

Vivvo CMS 4.1.5.1 File Disclosure

waraxe-2009-SA075 - Remote File Disclosure in Vivvo CMS 4.1.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 21. October 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-75.html Description of vulnerable software...

Remote File Disclosure in Vivvo CMS 4.1.5.1

No description provided by source. waraxe-2009-SA075 - Remote File Disclosure in Vivvo CMS 4.1.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 21. October 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-75.html...

[waraxe-2009-SA#075] - Remote File Disclosure in Vivvo CMS 4.1.5.1

waraxe-2009-SA075 - Remote File Disclosure in Vivvo CMS 4.1.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 21. October 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-75.html Description of vulnerable software...

Vivvo CMS 4.1.5.1 - file Disclosure

waraxe-2009-SA075 - Remote File Disclosure in Vivvo CMS 4.1.5.1 =============================================================================== Author: Janek Vind "waraxe" Date: 21. October 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-75.html Description of vulnerable software...