673 matches found
Cisco Unified Call Manager Arbitrary File Retrieval Vulnerability
A vulnerability in Cisco Unified Call Manager Cisco Unified CM could allow an authenticated, remote attacker to retrieve arbitrary files. The vulnerability is due to improper security restrictions by the affected application while handling requests for resources. An authenticated, remote attacker...
dashboard: log file arbitrary file retrieval
It was found that the local log-viewing function of the redhat-access-plugin for OpenStack Dashboard horizon did not sanitize user input. An authenticated user could use this flaw to read an arbitrary file with the permissions of the web server...
WordPress WP All 3.2.3 Shell Upload
------------------------------------------------------------------------------ WordPress WP All Import Plugin RCE ------------------------------------------------------------------------------ - Vulnerability Author: James Golovich @Pritect - Exploit Author Evex @Evex1337 - Plugin Link:...
LG DVR LE6016D - Remote File Disclosure
LG DVR LE6016D - Remote File Disclosure ---------------------------------------------------------------------- Title : LG DVR LE6016D - Remote File Disclosure Vulnerability 0day CVE-ID : none Product : LG Affected : All versions Impact : Critical Remote : Yes Product link:...
OpenCompact-Ftp-Server-1.2
Abusing authentication bypass in combination with a directory traversal to grab the sam file for offline cracking By Wireghoul - http://www.justanotherhacker.com Based on Serge Gorbunov's auth bypass http://www.exploit-db.com/exploits/13932/ Software Link: http://sourceforge.net/projects/open-ftp...
[SECURITY] Fedora 19 Update: wget-1.16-3.fc19
GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...
phpXplorer 0.9.33 Action.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16292/info phpXplorer is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...
MyBulletinBoard 1.x UserCP.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19195/info MyBulletinBoard is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...
atomicboard 0.6.2 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8236/info It has been reported that attackers may be able to modify the 'location' variable passed to the index.php file to cause the Web server to return arbitrary files. This script is prone to a directory traversal...
Microsoft IIS 4.0/5.0 Malformed Filename Request Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1193/info Requesting a known filename with the extension replaced with .htr preceeded by approximately 230 %20 which is an escaped character that represents a space from Microsoft IIS 4.0/5.0 will cause the server to...
Metainfo Sendmail 2.0/2.5,MetaIP 3.1
No description provided by source. source: http://www.securityfocus.com/bid/110/info MetaInfo www.metainfo.com puts out many NT service products, including MetaIP DHCP/DNS manager and Sendmail Unix port. Both products allow remote administration via Web UIs, and MetaIP uses Java to communicate ba...
Pheap 1.x/2.0 Edit.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22670/info Pheap is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve and edit the contents of arbitrary files...
Saxopress URL Parameter Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17474/info SAXoPRESS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve and...
Kebi Academy 2001 Input Validation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7125/info Kebi Academy 2001 does not sufficiently validate input supplied via URI parameters. As a result it has been reported that it is possible to retrieve arbitrary files which are readable by the web server. It has...
Microsoft Internet Explorer 5/6 XML Redirect File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5560/info A flaw in Microsoft Internet Explorer may reveal the entire contents of XML files and partial contents of other files to attackers. This vulnerability allows an attacker to read the entire contents of XML files,...
XOOPS <= 2.3.3 - Remote File Disclosure Vulnerability (.htaccess)
No description provided by source. ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca daath De Fulgentis -...
Luca Deri ntop 1.2 a7-9 Unauthorized File Retrieval Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1550/info ntop is a tool that shows the network usage, similar to what the popular top Unix command does. Starting ntop in web mode with the -w parameter starts ntop with it's own built in HTTP server, to allow remote...
alt-n worldclient standard 2.1 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1462/info The HTTP interface for WorldClient 2.1 is vulnerable to a directory traversal. By requesting a URL composed of the filename and ..\ it is possible for a remote user to retrieve and dowload any file of known...
Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
No description provided by source. tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good...
Apple QuickTime/Darwin Streaming Server 4.1.x parse_xml.cgi File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6990/info A file retrieval vulnerability has been reported for QuickTime/Darwin Streaming Server. The vulnerability exists due to insufficient sanitization of some parameters given to the parsexml.cgi script. Information...