Windows Service Trusted Path Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/post/common' require...

CVE-2012-2208: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in upgrade.php in Piwigo before 2.3.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

PT-2012-3881

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.3.4 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter of the upgrade.php file. Recommendations For versions prior to 2.3.4, update t...

CVE-2012-4253: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to learn/cubemail/install.php or 2 f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. dot dot in the...

PT-2012-5281

Name of the Vulnerable Software and Affected Versions MySQLDumper version 1.24.4 Description The issue allows remote attackers to read arbitrary files or execute arbitrary local files due to multiple directory traversal vulnerabilities. This can be achieved by including a .. dot dot in specific...

CVE-2012-4143: Improper Control of Generation of Code

Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog, a different vulnerability than CVE-2012-1924...

PT-2012-5188

Name of the Vulnerable Software and Affected Versions Opera versions prior to 12.01 on Windows and UNIX Opera versions prior to 11.66 and 12.x prior to 12.01 on Mac OS X Description The issue allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a...

CentOS Update for ghostscript CESA-2012:0095 centos6

Check for the Version of ghostscript OpenVAS Vulnerability Test CentOS Update for ghostscript CESA-2012:0095 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

AVA VoIP - Multiple Vulnerabilities

AVA VoIP - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/54591/info AVA VoIP is prone to multiple security vulnerabilities because the application fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...

PT-2012-4170

Name of the Vulnerable Software and Affected Versions Collabtive versions prior to 0.7.6 Description The issue allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions. This is achieved by uploading an avatar file with an accepted...

WordPress Plugin Contus Video Gallery - 'upload1.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53931/info WordPress Contus Video Gallery is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue to upload...

WordPress HTML5 AV Manager Plugin 'custom.php' Arbitrary File Upload Vulnerability

WordPress HTML5 AV Manager Plugin is prone to a file upload vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Plugin WP-Property 1.35.0 - Arbitrary File Upload

WordPress Plugin WP-Property 1.35.0 - Arbitrary File Upload Description : Wordpress Plugins - WP-Property - WordPress Powered Real Estate and Property Management Shell Upload Vulnerability Version : 1.35.0 Link : http://wordpress.org/extend/plugins/wp-property/ Plugins :...

PHP Volunteer Management System v1.0.2 Arbitrary File Upload

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "PHP Volunteer...

PT-2012-4041

Name of the Vulnerable Software and Affected Versions Pligg CMS versions prior to 1.2.2 Description The issue allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the captcha parameter to "module.php". This can be exploited through cross-site request...

SolarWinds Storage Manager SQL Injection

Added: 05/17/2012 BID: 51639 OSVDB: 81634 Background SolarWinds Storage Manager is agentless heterogeneous monitoring and reporting of the performance and capacity of physical and virtual storage infrastructure. It delivers visibility and insight into how your storage infrastructure maps to your...

CVE-2012-1924: Improper Control of Generation of Code

Opera before 11.62 allows user-assisted remote attackers to trick users into downloading and executing arbitrary files via a small window for the download dialog...

CVE-2012-1925: Undefined Security Weakness

Opera before 11.62 does not ensure that a dialog window is placed on top of content windows, which makes it easier for user-assisted remote attackers to trick users into downloading and executing arbitrary files via a download dialog located under other windows...

CVE-2012-1839: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXPClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pluginName or 2 pluginPath...

PT-2012-3583

Name of the Vulnerable Software and Affected Versions AjaXplorer versions 3.2.x through 3.2.4 AjaXplorer versions 4.0.x through 4.0.3 Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pluginName or pluginPath parameter in a "get...