ImageVue 0.16.1 index.php bgcol Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content injection. Successful exploitation...

badblue <= 2.72b Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Windows Bugs: A PassThru buffer-overflow B upload directory traversal C path disclosure Exploitation: remote Date: 10 Dec 2007 Author: Luigi Auriemma e-mail:...

DSA-1940-1 php5 - multiple issues

Bulletin has no description...

Cisco Security Advisory: Cisco Collaboration Server Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Collaboration Server Vulnerability Revision 1.0 For Public Release 2004 June 30 1600 UTC GMT ======================================================================== Contents ======== Summary Affected Products Details...

uploader.php vulnerability

Uploader Version 1.1 which is available from http://www.phpscriptcenter.com/uploader.php includes "uploader.php", which lets you upload ANY file even scripts eg. in PHP onto the server if no password protection is specified in the configuration file default set to off. The supplied files will be...

Multiple Microsoft IIS Vulnerabilities

Description Microsoft Internet Information Services IIS is prone to multiple vulnerabilities. The first vulnerability may allow an attacker to obtain elevated privileges. This vulnerability can be exploited by an attacker to load and execute applications on the vulnerable server with SYSTEM level...

PHPNuke 'admin.php' script does not adequately authenticate users, thereby allowing malicious user to copy, move, or upload files

Overview PHPNuke's "admin.php" script does not properly authenticate users of its filemanager capabilities. Attackers may exploit this vulnerability to copy, move, or upload files. Description PHPNuke is a set of PHP scripts designed to simplify website creation and maintenance. The "admin.php"...

SCPOnly 2.3/2.4 - SSH Environment Shell Escaping

source: https://www.securityfocus.com/bid/5526/info scponly is a freely available, open source restricted secure copy client. It is available for Unix and Linux operating systems. The default installation of scponly does not place sufficient access controls on the .ssh subdirectory. Due to this...

Entrust - getAccess

hola friends, getAccesstm is used as a single-sign-on system often used for large internet-portals. --- snip http://www.entrust.com --- Entrust GetAccesstm offers the most comprehensive solution for consistently deploying and enforcing basic and enhanced security across online applications, from...

thebat.traverse.txt

SECURITY.NNOV advisory - The Bat! directory traversal Topic: The Bat! attachments directory traversal Author: 3APA3A Affected Software: The Bat! Version wish her good luck, she will need it : Background: The Bat! is extremely convenient commercially available MUA for Windows will be best one then...

Anonymous FTP Writable root Directory

It is possible to write on the root directory of the remote anonymous FTP server. This allows an attacker to upload arbitrary files which can be used in other attacks, or to turn the FTP server into a software distribution point. TRUSTED...