McGallery 0.5b Arbitrary File Download Vulnerability

Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker The Am0s Team Greetz: KX-T33, kakalake, nAzGuL, Putus...

McGallery 0.5b (download.php) Arbitrary File Download Vulnerability

No description provided by source. Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker The Am0s Team...

McGallery 0.5b - 'download.php' Arbitrary File Download

Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker The Am0s Team Greetz: KX-T33, kakalake, nAzGuL, Putus...

McGallery 0.5b (download.php) Arbitrary File Download Vulnerability

Exploit for unknown platform in category web applications =================================================================== McGallery 0.5b download.php Arbitrary File Download Vulnerability =================================================================== Piker McGallery 0.5b Arbitrary File...

McGallery 0.5b - download.php Arbitrary File Download

McGallery 0.5b - download.php Arbitrary File Download Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker...

CVE-2007-1120

The 1 Import.LoadFromURL and 2 Export.asText.SaveToFile functions in TeeChart Pro ActiveX control TeeChart7.ocx allow remote attackers to download a crafted .tee file to an arbitrary location. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

pickle download local file

download local file : /Pickle/src/download.php?img=1&file=../../../../../../../../../../../../../etc/shadow&rotation=0&img=0 regards laurent gaffie...

Design/Logic Flaw

download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials...

Article System 0.1 - 'INCLUDE_DIR' Remote File Inclusion

Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus Bug in:/path/include Vul Code; requireonce "$INCLUDEDIR/classes/class.formitem.php"; POC:...

Rediff Bol Downloader允许文件下载及执行漏洞

Rediff Bol是一款即时通信工具。 Rediff Bol的Downloader控件在处理文件下载时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意命令。 Rediff Bol的Downloader控件允许任意网页下载并执行任意位置的程序而不会对其过滤，在IE中执行远程的程序时会报警，但在执行本地程序时不会有提示。 Rediff Bol Downloader 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://messenger.rediff.com/newbol/ Gregory R. Panakkal...

rediffbol.txt

Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability...

[Full-disclosure] Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files

Rediff Bol Downloader ActiveX Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal...

Shadowed Portal Module Character Roster - mod_root Remote File Inclusion

Shadowed Portal Module Character Roster - modroot Remote File Inclusion =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shadowed Portal 5.7. Roster Module modroot Remote File Include...

CVE-2006-6513

The CControl::Download function /dl URI in Winamp Web Interface Wawi 7.5.13 and earlier allows remote authenticated users to download arbitrary file types under the root via a trailing "." dot in a filename in the file parameter, related to erroneous behavior of the IsWinampFile function...

Winamp Web接口多个安全漏洞

Winamp Web接口（Wawi）是Winamp的一个开源插件，允许用户通过Web浏览器远程管理媒体播放器。 Wawi的实现后半辈子存在多个安全漏洞，具体如下： ----------------------------------- A FindBasicAuth缓冲区溢出 ----------------------------------- FindBasicAuth函数位于security.cpp，用于解析客户端请求中的Authorization...

Winamp Web interface 7.5.13 - Multiple Vulnerabilities

Winamp Web interface 7.5.13 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/21539/info Winamp Web Interface is prone to multiple remote vulnerabilities. These issues include: - Buffer-overflow issues - A directory-traversal issue - An arbitrary file-download issue - A...

Winamp Web interface 7.5.13 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/21539/info Winamp Web Interface is prone to multiple remote vulnerabilities. These issues include: - Buffer-overflow issues - A directory-traversal issue - An arbitrary file-download issue - A denial-of-service issue - An information-disclosure issue An...

CVE-2006-6240

Directory traversal vulnerability in Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to list contents of arbitrary directories and download arbitrary files via a .. dot dot sequence in an FTP command argument, as demonstrated by RETR GET or STOR PUT. NOTE: The provenance of th...

HTTP Upload Tool (download.php) Information Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== HTTP Upload Tool download.php Information Disclosure Vulnerability ==================================================================== Target: HTTP Upload Tool For PHP 1...

CVE-2006-5791

Multiple cross-site scripting XSS vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via 1 the filename for downloading, which is not quoted in an error message by the sendfiledirect function, and 2 the Type or Category values in a N...