CVE-2002-1927

CVE-2002-1927 affects Aquonics File Manager 1.5. The vulnerability allows users with edit privileges to modify user accounts by editing the file userlist.cgi , giving an attacker the ability to alter user data (integrity impact). The underlying CVSS metrics indicate a local attack vector with low...

CVE-2002-1926

CVE-2002-1926 affects Aquonics File Manager 1.5, where a directory traversal flaw in source.php allows remote attackers to read arbitrary files by supplying .. in the HTTP query string. The core issue is insufficient input validation/traversal of file paths in the PHP script. Public references co...

CVE-2002-1926: Undefined Security Weakness

Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP query string...

CVE-2002-1815: Undefined Security Weakness

Directory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2002-1927: Undefined Security Weakness

Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file...

File Upload Manager Sploits

Below is some code for a recent unpatched exploit for file managers using php as the base code. Share this with the world and help protect. File Upload Manager - Bypass File Extension and Arbitrary File Delete nothing to see here @ hackthissite.org Through an input validation flaw, users are able...

CVE-2005-1603

NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service crash via a crafted string to TCP port 7080...

CVE-2005-1603

NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service crash via a crafted string to TCP port 7080...

CVE-2005-1602

SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field...

CVE-2005-1602

Technical details for CVE-2005-1602 are not publicly available in the provided connected documents. No specific affected product/version or exploit information is confirmed here. Monitor for updates from official sources.

CVE-2005-1602

SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field...

CVE-2005-1603

CVE-2005-1603 affects NiteEnterprises Remote File Manager 1.0. The vulnerability allows an attacker to trigger a denial-of-service (crash) by sending a crafted string to TCP port 7080. No exploit details or in-the-wild context are provided in the available documents. The sources list the impact a...

CVE-2005-1603: Undefined Security Weakness

NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service crash via a crafted string to TCP port 7080...

CVE-2005-1602: Undefined Security Weakness

SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field...

Remote File Manager 1.0 - Denial of Service

Remote File Manager 1.0 - Denial of Service / Server Remote File Manager DoS Exploit ------------------------------------------- INFGP - Hacking&security Research + Attacking localhost.. + Build DOS string + Buffer size = 300 byte + Sending bad format.. + localhost : Disconected! Greats: Infam0us...

Remote File Manager 1.0 Denial of Service Exploit

No description provided by source. / Server Remote File Manager DoS Exploit ------------------------------------------- INFGP - Hacking&security Research + Attacking localhost.. + Build DOS string + Buffer size = 300 byte + Sending bad format.. + localhost : Disconected! Greats: Infam0us...

Remote File Manager 1.0 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================= Remote File Manager 1.0 Denial of Service Exploit ================================================= / Server Remote File Manager DoS Exploit ------------------------------------------- INFGP -...

Remote File Manager 1.0 - Denial of Service

/ Server Remote File Manager DoS Exploit ------------------------------------------- INFGP - Hacking&security Research + Attacking localhost.. + Build DOS string + Buffer size = 300 byte + Sending bad format.. + localhost : Disconected! Greats: Infam0us...

osCommerce2.txt

there is allready a post on this that have filemanager.php?action=download&filename=../../../../../../etc/passwd sometime the action=download doesn't work , so i tried action=read /admin/filemanager.php?action=read&filename=../../../../...

osCommerce File Manager Directory Traversal Vulnerability

there is allready a post on this that have filemanager.php?action=download&filename=../../../../../../etc/passwd sometime the action=download doesn't work , so i tried action=read /admin/filemanager.php?action=read&filename=../../../../...