joomlaimage-traverse.txt

Joomla Imagebrowser File Inc. Cr@zyKing / www.biyosecurity.com / sqL Lov3r'Z Crew Co. 2008 Down : http://www.joomlatr.org/index.php/component/remository/?func=fileinfo&id=129 FI : http://127.0.0.1/index.php?option=comimagebrowser&folder=../../../../ Grtz : aLL My Friend'z...

Authentication flaw

file.cgi in Secure Computing SecurityReporter aka Network Security Analyzer 4.6.3 allows remote attackers to bypass authentication via a name parameter that specifies the eventcache directory and a non-GIF file, which causes the $dontvalidate variable to be set to true. NOTE: a separate traversal...

qdblog-lfisql.txt

. . . . | . .| . .;/ || Infos --------- Date : 2007-04-12 Product : QDBlog Version : v0.4 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/qdblog/ Vendor Status : 2007-04-12 - Not Informed! Description : QDBlog is an open-source, simple, minimalistic blogging...

Quick and Dirty Blog (qdblog) 0.4 - SQL Injection Local File Inclusion

Quick and Dirty Blog qdblog 0.4 - SQL Injection Local File Inclusion . . . . | . .| . .;/ || Infos --------- Date : 2007-04-12 Product : QDBlog Version : v0.4 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/qdblog/ Vendor Status : 2007-04-12 - Not Informed!...

Busy box httpd file traversal vulenrability

a file traversal attack is possible in busybox's http daemon when you send a url encoded slash like this http://attacked-host//2e2e/2e2e/2e2e/2e2e/2e2e/etc/passwd I have tested with busy box 1.01 and I dont know if other versions are vulenrable...

Total PC Solutions PHP Rocket Add-in for FrontPage File Traversal Vulnerability

There is a vulnerability in the Total PC Solutions PHP Rocket Add-in for FrontPage that allows a remote attacker to view the contents of any arbitrary file to which the web user has access. SPDX-FileCopyrightText: 2001 HD Moore & Drew Hintz Some text descriptions might be excerpted from a...

CVE-2005-0701

Directory traversal vulnerability in Oracle Database Server 8i and 9i allows remote attackers to read or rename arbitrary files via "\.\.." modified dot dot backslash sequences to UTLFILE functions such as 1 UTLFILE.FOPEN or 2 UTLFILE.frename...

winaceHKI.txt

Application: WinAce, WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: ZIP File Directory Transversal Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1...

File Transversal Vulnerability in Dino's WebServer

Dino's WebServer, File Transversal Vulnerability Date: January 8, 2002 Author: CaMaLeOn Affected: Dino's WebServer Tested by: CaMaLeOn, DraZiw, WiZaRd Versions Test: 1.x Vendor Status: Notified Plattaforms: win9x, win2000, WinNT Dino's Webserver is a small and very simple to use web server that i...

iPlanet Certificate Management Traversal Arbitrary File Access

It is possible to read arbitrary files on the remote server by prepending /ca/../../ in front on the file name. C Tenable Network Security, Inc. XXX might be redundant with plugin 10589 include"compat.inc"; ifdescription scriptid10683; scriptversion "1.25"; scriptcveid"CVE-2000-1075";...

Drummond Miles A1Stats 1.0 - a1disp2.cgi Traversal Arbitrary File Read

Drummond Miles A1Stats 1.0 - a1disp2.cgi Traversal Arbitrary File Read source: https://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as...

Drummond Miles A1Stats 1.0 - 'a1disp4.cgi' Traversal Arbitrary File Read

source: https://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script. An attacker can compose a long path...

uStorekeeper ustorekeeper.pl file Parameter Traversal Arbitrary File Access

The 'ustorekeeper.pl' CGI script installed on the remote host allows an attacker to read arbitrary files subject to the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

sendtemp.pl - Read Access to Files

!/usr/bin/perl -w sendtemp.pl: A part of the Amaya Web development server contains a file disclosure vulnerability, which allows remote, read access to files on the servers file system, as whichever user the httpd is running as. The Vulnerability is really quite simple.. When the templ argument i...

W3.ORG sendtemp.pl

Follows are details of a vunerability I recently discovered in W3.ORGS sendtemp.pl. Name: sendtemp.pl W3C. Remote: Yes Local: Yes Type: sendtemp.pl: A part of the Amaya Web development server contains a file disclosure vulnerability, which allows remote, read access to files on the servers file...