CVE-2014-5659

The ASTRO File Manager with Cloud aka com.metago.astro application ASTRO-4.4.592 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5659

CVE-2014-5659 affects the Android app “ASTRO File Manager with Cloud” (package com.metago.astro), specifically version ASTRO-4.4.592. The root cause is that the app does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and access sensitive information ...

N-Media File Uploader < 2.0 Arbitrary File Upload

The Frontend File Manager Plugin WordPress plugin was affected by security vulnerability...

Front File Manager 0.1 - Arbitrary File Upload

The front-file-manager WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Frog CMS 0.9.5 - Arbitrary File Upload

Frog CMS 0.9.5 - Arbitrary File Upload Exploit Title: Arbitrary File Upload in Frog CMS 0.9.5 Date : 2014-07-07 Exploit Author : Javid Hussain Vendor Homepage : http://www.madebyfrog.com Exploit-DB Note: All authenticated users can upload files. If the file does not have execute permissions the C...

Libra File Manager 1.18/2.0 'fileadmin.php' Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31403/info Libra File Manager is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view...

ezcms <= 1.2 (bsql/admin byapss) Multiple Vulnerabilities

No description provided by source. -+================================================================================+- -+ EZCMS = 1.2 Multiple Remote Vulnerabilitys +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 19 M...

Wordpress Front File Manager Plugin 0.1 - Arbitrary File Upload

No description provided by source. Exploit Title: Wordpress front file manager 0.1 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/front-file-manager/ Date: 07/06/2012 Exploit Author: Adrien Thierry adrien dot thierryfr at gmail dot com Vendor Homepage: http://www.webikon.sk/en Softwa...

Mega File Manager - File Download Vulnerability

No description provided by source. Exploit Title: MegaFileManager FileDownload Vulnerability date: 2012-04-19 Author: i2sec-Min Gi Jo Software Link: http://www.awesomephp.com/?Download5 Version: Mega File Manager V 1.0 Tested on: Windows Description : There is no filtering on 'cimages.php'...

Parallels Virtuozzo Containers 3.0.0-25.4/4.0.0-365.6 VZPP Interface File Manger - Cross-Site Request Forgery Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28589/info Parallels Virtuozzo Containers is prone to a cross-site request-forgery vulnerability. Exploiting the issue will allow a remote attacker to use a victim's currently active session to perform certain...

Ajax File Manager Directory Traversal

No description provided by source. Exploit Title: Ajax File Manager DirectoryTraversal Google Dork: inurl: plugins/ajaxfilemanager Date: 03/07/2014 Exploit Author: Eduardo Alves edudx9 Vendor Homepage: phpletter.com Software Link: http://phpletter.com/Demo/Ajax-File--Manager/ Version: app version...

ePhone Disk 1.0.2 iOS - Multiple Vulnerabilities

No description provided by source. Document Title: =============== ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1230 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID VL-ID:...

Webmin /file/show.cgi Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Qto File Manager 1.0 index.php Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18510/info Qto file manager is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...

Libra PHP File Manager <= 1.18 Insecure Cookie Handling Vulnerability

No description provided by source. + Libra PHP File Manager Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = user=1; path=/; document.cookie = pass=1; path=/; milw0rm.com 2008-09-26...

QTO File Manager 1.0 - 'qtofm.php' Arbitrary File Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29072/info QTO File Manager is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code because the application fails to sanitize user-supplied input. An attacker can leverage this issu...

osCommerce 2.x File Manager Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10364/info osCommerce has a directory-traversal vulnerability that allows a remote attacker to possibly obtain sensitive information. The software improperly sanitizes user-supplied input and allows '../'...

Simple File Manager v.024 - Login Bypass Vulnerability

No description provided by source. Exploit Title: Simple File Manager v.024 Login Bypass Vulnerability Date Published: 2013/6/17 Exploit Author: Chako Software Link: http://onedotoh.sourceforge.net/ Version: v.024 Doesn't work on v.025 Description: ===================== A vulnerability has been...

Tastydir <= 1.2 (1216) Multiple Vulnerabilities

No description provided by source. Exploit Title: Tastydir = 1216 folder creation vuln Date: Oct 17 2010 Author: R Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version: 1216 Tested on: Ubuntu 10.10 Information: Tastydir is a cross-platform PHP fil...

DM FileManager 3.9.4 - Remote File Disclosure Vulnerability

No description provided by source. + DM FileManager 3.9.4 Remote File Dislosure Vulnerability + Author : Stack + Greetz : V4 Team & Sec R1z + Download Script : http://www.dutchmonkey.com/?file=products/dm-filemanager/downloadresponse.html&download=direct + Xpl : +...