Lucene search
+L

3210 matches found

Cvelist
Cvelist
added 2007/11/01 4:4 p.m.31 views

CVE-2007-5773

Cross-site request forgery CSRF vulnerability in index.php in the File Manager module in Flatnuke 3 allows remote attackers to perform certain actions as administrators via requests containing the pathname in the dir parameter and the filename in the ffile parameter...

6.9AI score0.00876EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2007/11/01 4:4 p.m.32 views

CVE-2007-5774

index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message...

6.1AI score0.02603EPSS
SaveExploits1References3
seebug.org
seebug.org
added 2007/10/24 12:0 a.m.12 views

Flatnuke 3 Remote Command Execution / Privilege Escalation

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/10/23 12:0 a.m.14 views

Flatnuke 3 - Remote Command Execution Privilege Escalation

Flatnuke 3 - Remote Command Execution Privilege Escalation --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

0.9AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/10/23 12:0 a.m.31 views

Flatnuke 3 - Remote Command Execution / Privilege Escalation

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flatnuke 3...

5CVSS5.8AI score0.02603EPSS
SaveExploits1
zdt
zdt
added 2007/10/23 12:0 a.m.24 views

Flatnuke 3 Remote Command Execution / Privilege Escalation

Exploit for unknown platform in category web applications ========================================================== Flatnuke 3 Remote Command Execution / Privilege Escalation ========================================================== --------------------------------------------------------------...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2007/10/23 12:0 a.m.25 views

flatnuke3-fm.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flatnuke 3...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2007/10/22 12:0 a.m.26 views

Flatnuke3 File Manager Module - Unauthorized Access

Flatnuke3 File Manager Module - Unauthorized Access source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/10/22 12:0 a.m.20 views

Flatnuke3 File Manager Module - Unauthorized Access

source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can exploit this vulnerability to gain administrative contro...

5.8AI score
SaveExploits0
securityvulns
securityvulns
added 2007/08/25 12:0 a.m.26 views

UnrealCommander file manager directory traversal

Directory traversal on archive extraction...

3.9AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2007/06/06 1:30 a.m.16 views

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

4.3CVSS5.7AI score0.01485EPSS
SaveExploits2References4
CVE
CVE
added 2007/06/06 1:0 a.m.47 views

CVE-2007-3049

CVE-2007-3049 : In Buttercup Web File Manager (BWFM), the vulnerability is an XSS in index.php via the title parameter. The root cause is lack of input sanitization on the title field, allowing remote attackers to inject arbitrary web script/HTML. According to the NVD entry, the impact is partial...

4.3CVSS5.7AI score0.01485EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
added 2007/06/06 1:0 a.m.26 views

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

5.7AI score0.01485EPSS
SaveExploits2References4
Exploit DB
Exploit DB
added 2007/06/01 12:0 a.m.24 views

Buttercup WFM - 'Title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

4.3CVSS5.8AI score0.01485EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2007/04/23 12:0 a.m.47 views

WEBInsta FM 0.1.4 - 'login.php' absolute_path Remote File Inclusion

!/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title WebInsta FM = 0.1.4 Remote File Inclusion Vulnerability Description This is a basic file manager written by WebInsta.com Vuln Code In...

6.8CVSS5.8AI score0.03121EPSS
SaveExploits1
seebug.org
seebug.org
added 2007/04/23 12:0 a.m.38 views

WEBInsta FM 0.1.4 login.php absolute_path Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title WebInsta FM = 0.1.4 Remote Fi...

7.1AI score
SaveExploits0
zdt
zdt
added 2007/04/23 12:0 a.m.58 views

WEBInsta FM 0.1.4 login.php absolute_path Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ======================================================================= WEBInsta FM 0.1.4 login.php absolutepath Remote File Inclusion Exploit ======================================================================= !/usr/bin/perl / \ / \ |...

7.1AI score
SaveExploits0
securityvulns
securityvulns
added 2007/04/19 12:0 a.m.50 views

Expow 0.8 File manager Autoindex.php (cfg_file) Remote File Inclusion Vulnerability

Expow 0.8 File manager Autoindex.php cfgfile Remote File Inclusion Vulnerability found by : mdx -------------------------------------------------------------------------- Download script : http://sourceforge.net/project/downloading.php?groupid=29595&usemirror=kent&filename=expow-0.8.tar.gz&929272...

SaveExploits0
exploitpack
exploitpack
added 2007/04/12 12:0 a.m.15 views

Expow 0.8 - autoindex.php?cfg_file Remote File Inclusion

Expow 0.8 - autoindex.php?cfgfile Remote File Inclusion Expow 0.8 File manager Autoindex.php cfgfile Remote File Inclusion Vulnerability found by : mdx -------------------------------------------------------------------------- Download script :...

0.1AI score
SaveExploits0
NVD
NVD
added 2007/01/16 11:28 p.m.26 views

CVE-2007-0252

Unspecified vulnerability in easy-content filemanager allows remote attackers to upload or modify arbitrary files via unspecified vectors...

7.5CVSS6.9AI score0.01187EPSS
SaveExploits0References2
Rows per page
Query Builder