Improper access control

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

Struts 2.0.11 - Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/32104/info Struts is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues using directory-traversal strings '../' to download arbitrary files...

PHP168 下载任意文件漏洞

PHP168整站是PHP领域当前功能最强大的建站系统，代码全部开源，可极其方便的进行二次开发，所有功能模块可以自由安装与删除，个人用户完全免费使用。 利用了程序的编码漏洞，下载配置和登陆日志文件 2008 暂无 http://www.php168.com/ 下载 mysqlconfig.php 和 adminloginlogs.php 两个文件到本地。 http://dabei.org//job.php?job=download&url="aHR0cDovL2RhYmVpLm9yZy8vY2FjaGUvYWRtaW5sb2dpbl9sb2dzLnBocA=="...

phpdaily-sqlxsslfd.txt

| | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / // / // / / / // // || | | v // / / O / | | | | / \ / / / / / / / / /// // /| || | | \ / / / | | | |/ / / / / / / / / / / / / / // /| || | | |\ \ / / /\ \ | | | / /\ / // // // // // ///||||| \/// \ | | | / / | | | / | | | /...

PHPdaily (SQL/XSS/LFD) Multiple Remote Vulnerabilities

No description provided by source. | | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / // / // / / / // // || | | v // / / O / | | | | / \ / / / / / / / / /// // /| || | | \ / / / | | | |/ / / / / / / / / / / / / / // /| || | | |\ \ / / /\ \ | | | / /\ / // // // // // ///|||||...

phpdaily - SQL Injection Cross-Site Scripting Local File Download

phpdaily - SQL Injection Cross-Site Scripting Local File Download | | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / // / // / / / // // || | | v // / / O / | | | | / \ / / / / / / / / /// // /| || | | \ / / / | | | |/ / / / / / / / / / / / / / // /| || | | |\ \ / / /\ \ | | | /...

phpdaily - SQL Injection / Cross-Site Scripting / Local File Download

| | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / // / // / / / // // || | | v // / / O / | | | | / \ / / / / / / / / /// // /| || | | \ / / / | | | |/ / / / / / / / / / / / / / // /| || | | |\ \ / / /\ \ | | | / /\ / // // // // // ///||||| \/// \ | | | / / | | | / | | | /...

PHPdaily (SQL/XSS/LFD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== PHPdaily SQL/XSS/LFD Multiple Remote Vulnerabilities ====================================================== | | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / // / // /...

Zenturi ProgramChecker ActiveX Control Arbitrary File Download

This module allows remote attackers to place arbitrary files on a users file system via the Zenturi ProgramChecker sasatl.dll 1.5.0.531 ActiveX Control. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

ped-disclose.txt

::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit: http://www.target.com/phpeasydownloader/index.php?file=index.php...

PHP Easy Downloader 1.5 - file File Disclosure

PHP Easy Downloader 1.5 - file File Disclosure ::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit:...

PHP Easy Downloader 1.5 - 'file' File Disclosure

::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit: http://www.target.com/phpeasydownloader/index.php?file=index.php milw0rm.com...

PHP Easy Downloader 1.5 (file) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ PHP Easy Downloader 1.5 file File Disclosure Vulnerability ============================================================ ::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy...

VulnCheck KEV: CVE-2008-2463

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail...

CVE-2008-4020

Cross-site scripting XSS vulnerability in Microsoft Office XP SP3 allows remote attackers to inject arbitrary web script or HTML via a document that contains a "Content-Disposition: attachment" header and is accessed through a cdo: URL, which renders the content instead of raising a File Download...

My PHP Indexer 1.0 (index.php) Local File Download Vulnerability

No description provided by source. My PHP Indexer 1.0 index.php Local File Download Vulnerability url: http://sourceforge.net/projects/myphpindexer/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational...

myphpindexer-download.txt

My PHP Indexer 1.0 index.php Local File Download Vulnerability url: http://sourceforge.net/projects/myphpindexer/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Auth...

My PHP Indexer 1.0 (index.php) Local File Download Vulnerability

Exploit for unknown platform in category web applications ================================================================ My PHP Indexer 1.0 index.php Local File Download Vulnerability ================================================================ My PHP Indexer 1.0 index.php Local File Downlo...

My PHP Indexer 1.0 - 'index.php' Local File Download

My PHP Indexer 1.0 index.php Local File Download Vulnerability url: http://sourceforge.net/projects/myphpindexer/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Auth...

My PHP Indexer 1.0 - index.php Local File Download

My PHP Indexer 1.0 - index.php Local File Download My PHP Indexer 1.0 index.php Local File Download Vulnerability url: http://sourceforge.net/projects/myphpindexer/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for...