IF-CMS 2.07 - Local File Inclusion (Metasploit) (2)

IF-CMS 2.07 - Local File Inclusion Metasploit 2 $Id: if-cms.rb 2011-03-15 20:28:10 tecr0c $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

CVE-2011-1684

Heap-based buffer overflow in the MP4ReadBoxskcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1.9 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted MP4 file...

PT-2011-1746

Name of the Vulnerable Software and Affected Versions OrangeHRM version 2.6.0.1 Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter in the index.php file. Recommendations For OrangeHRM version 2.6.0.1,...

CVE-2011-0698

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / slash character in a key in a session cookie, related to session replays...

PT-2011-2568

Name of the Vulnerable Software and Affected Versions Django versions 1.1.x through 1.1.3 Django versions 1.2.x through 1.2.4 Description A directory traversal issue might allow remote attackers to read or execute files via a / slash character in a key in a session cookie, related to session...

CVE-2011-0698: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / slash character in a key in a session cookie, related to session replays...

CVE-2011-0505: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in system/system.php in Zwii 2.1.1, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the settemplatevalue parameter...

PT-2011-2417

Name of the Vulnerable Software and Affected Versions LotusCMS Fraise version 3.0 Description A directory traversal issue exists in the core/lib/router.php file of LotusCMS Fraise. This issue allows remote attackers to include and execute arbitrary local files when the magic quotes gpc setting is...

MeshCMS v3.5 Remote Code Execution Exploit

Exploit for jsp platform in category web applications !/usr/bin/python MeshCMS v3.5 remote code execution exploit Environment: Tomcat 7.02/ubuntu 10.04 1 details: There is a add member/editor/admin CSRF vulnerability in this CMS which is very clean for an attacker. The admin will not be told a us...

CVE-2010-4350

Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

PT-2010-5579

Name of the Vulnerable Software and Affected Versions Hycus CMS version 1.0.3 Description The issue allows remote attackers to include and execute arbitrary local files. This is achieved by exploiting directory traversal vulnerabilities using a .. dot dot in the "site" parameter to specific API...

EUR Form Client Arbitrary File Execution Vulnerability

Overview EUR Form Client has an arbitrary file execution vulnerability. Impact A remote attacker could execute arbitrary file on the affected system. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

CVE-2010-4330: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to index.php...

PT-2010-5422

Name of the Vulnerable Software and Affected Versions Pulse CMS Basic versions prior to 1.2.9 Description The issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the p parameter to "index.php". Recommendations For versions prior to...

CVE-2010-4406: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magicquotesgpc is disabled, allows remote attackers to list, include, and execute arbitrary local files via a ..// dot dot slash slash in the repertoire parameter...

PT-2010-5482

Name of the Vulnerable Software and Affected Versions Brunetton LittlePhpGallery version 1.0.2 Description The issue allows remote attackers to list, include, and execute arbitrary local files. This is achieved by exploiting a directory traversal vulnerability in the gallery.php file when the mag...

PT-2010-5400

Name of the Vulnerable Software and Affected Versions Pandora FMS versions prior to 3.1.1 Description The issue allows remote attackers to include and execute arbitrary local files via specific parameters in various PHP files. This can be achieved through the "page" parameter to "ajax.php", the...

KLA10305 ACE vulnerabilities in RealPage Module Upload

A buffer overflow was found in RealPlayer. By exploiting this vulnerability malicious users can execute arbitrary files. This vulnerability can be exploited remotely via a specially designed MP4 file. Original advisories - Exploitation Related products...

freeciv unauthorized access

It's possible to access files and execute commands via scenario...

CVE-2010-2797: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the defaultcmslang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different...