3378 matches found
opera 9.52 using ajax to read a local file vulnerability-vulnerability warning-the black bar safety net
by emptiness prodigal heart This may also be a safety feature right, opera can use ajax to read a local file. ff3 does not have this vulnerability. Not nonsense, look at the code. Use as follows: This piece of code saved as a local htm file, and then use opera to open. Will put a local user name...
RSS Simple News - SQL Injection
RSS Simple News - SQL Injection !/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers RSS Simple News Remote SQL Injection Exploit http://sourceforge.net/projects/rss-simple-news/ This exploit tries to read an arbitrary file. It...
RSS Simple News - SQL Injection
!/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers RSS Simple News Remote SQL Injection Exploit http://sourceforge.net/projects/rss-simple-news/ This exploit tries to read an arbitrary file. It needs magicquotesgpc=off...
CVE-2008-5587
Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when registerglobals is enabled, allows remote attackers to read arbitrary files via a .. dot dot in the language parameter to index.php...
Design/Logic Flaw
The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...
gCards Multiple Vulnerabilities
The remote web server contains a PHP application that is prone to multiple vulnerabilities. Description : The remote host is running gCards, a free electronic greeting card system written in PHP. The installed version of gCards fails to sanitize user input to the 'setLang' parameter in the...
CVE-2008-4638
qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...
CVE-2008-4075
CVE-2008-4075 is a directory traversal vulnerability in D-iscussion Board 3.01 (index.php) that allows remote attackers to read arbitrary files via a .. in the topic parameter. Affected software: D-iscussion Board 3.01. Root cause: traversal in topic parameter handling. Impact (as per NVD): parti...
CVE-2008-3946
The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...
FreeBSD Ports: phpmyadmin
The remote host is missing an update to the system as announced in the referenced advisory. VID fe971a0f-1246-11dd-bab7-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-3737
Unspecified vulnerability in 1 System Consultants La!Cooda WIZ 1.4.0 and earlier and 2 SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to execute arbitrary PHP scripts, and delete files, read files, and possibly have unknown other impact...
PT-2008-4375 · Apache +2 · Apache Tomcat +2
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.37 Apache Tomcat versions 5.5.0 through 5.5.26 Apache Tomcat versions 6.0.0 through 6.0.16 Description: The issue allows remote attackers to read arbitrary files via encoded directory traversal sequenc...
CVE-2008-3087
Directory traversal vulnerability in Kasseler CMS 1.3.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to index.php, possibly related to the phpManual module...
CVE-2008-3087
CVE-2008-3087 affects Kasseler CMS 1.3.0 and enables a directory traversal via a .. in the file parameter to index.php (possibly related to the phpManual module). The NVD entry records this as a medium-severity vulnerability (CVSS v2 base score 5.0) with network access and no authentication requi...
Fonality trixbox - langChoice Local File Inclusion (connect-back) (2)
Fonality trixbox - langChoice Local File Inclusion connect-back 2 !/usr/bin/perl -w Jean-Michel BESNARD / LEXSI Audit 2008-07-09 This is an update of the previous exploit. We can now get a root shell, thanks to sudo. perl trixboxfiv2.pl 192.168.1.212 Please listen carefully as our menu option has...
CVE-2008-2045
SugarCRM Community Edition 4.5.1 and 5.0.0 are affected by an absolute path traversal in modules/Feeds/Feed.php, allowing remote attackers to read arbitrary files by supplying a full path in the URL parameter; the content is placed into a related cache file in the .cache/feeds directory. This sum...
CVE-2008-1924
Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable...
CVE-2008-1415
CVE-2008-1415 affects the web app component index.php in Multiple Time Sheets (MTS) 5.0 and earlier. The vulnerability is a directory traversal through the tab parameter, using modified dot-dot sequences ("../..//"), allowing remote attackers to read arbitrary files. The provided documents do not...
Debian Security Advisory DSA 1521-1 (lighttpd)
The remote host is missing an update to lighttpd announced via advisory DSA 1521-1. OpenVAS Vulnerability Test $Id: deb15211.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1521-1 lighttpd Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...