3801 matches found
PT-2004-2917 · Oscommerce · Oscommerce
Name of the Vulnerable Software and Affected Versions: osCommerce version 2.2 Description: A directory traversal issue exists, allowing remote attackers to view arbitrary files by including a .. dot dot in the filename argument of the file manager.php script. Recommendations: For osCommerce versi...
phpGroupWare.txt
GulfTech Security Research December 14th, 2004 Vendor : phpGroupWare URL : http://www.phpgroupware.org Version : phpGroupWare 0.9.16.003 Risk : Multiple Vulnerabilities Description: phpGroupWare formerly known as webdistro is a multi-user groupware suite written in PHP. It provides a Web-based...
RHEL 2.1 : kdelibs (RHSA-2003:236)
This erratum provides updated KDE packages that resolve a security issue in Konquerer. KDE is a graphical desktop environment for the X Window System. Konqueror is the file manager for the K Desktop Environment. George Staikos reported that Konqueror may inadvertently send authentication...
CVE-2003-1460
Worker Filemanager 1.0 through 2.7 sets the permissions on the destination directory to world-readable and executable while copying data, which could allow local users to obtain sensitive information...
CVE-2003-1539
Cross-site scripting XSS vulnerability in ONEdotOH Simple File Manager SFM before 0.21 allows remote attackers to inject arbitrary web script or HTML via 1 file names and 2 directory names...
Simple File Manager Directory / Filename XSS
The remote Simple File Manager CGI fm.php improperly validates the names of the directories entered and created by the user. As a result, a user could generate a cross-site scripting attack on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
RARLAB FAR 1.651.70 - File Manager Buffer Overflow
RARLAB FAR 1.651.70 - File Manager Buffer Overflow source: https://www.securityfocus.com/bid/6822/info A buffer overflow vulnerability has been reported for FAR that may result in a denial of service condition. The vulnerability exists due to insufficient bounds checking performed by FAR when...
Remote root vuln in HSphere WebShell
Hi all, Below is an advisory on a remote and local root vulnerability in the HSphere product by Positive Software which is used by many web-hosting providers. The vulnerability is in the WebShell component installed by default. Proof of concept exploits are provided and links to patched versions ...
CVE-2002-1926
Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. dot dot in the HTTP query string...
CVE-2002-1927
Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file...
CVE-2002-1815
Directory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. dot dot in the URL...
Directory traversal in Aquonics File Manager
No description provided...
Eraser advisory :)
Advisory by Eraser 5 / Продукт: Aquonics File Manager 1.5 advisory 5 Уязвимость: 1.Обратный путь в директориях 2.Повышение прав доступа Разработчик программы: www.aquonics.com Опасность: высокая Дата: 19.07.02 / --Описание-- Aquonics File Manager 1.5 - расширенный файл мэнеджер. Через первую...
Command execution in phprojekt.
"PHProjekt is a modular application for the coordination of group activities and to share informations and document via intranet and internet. Components of PHProjekt: Group calendar, project management, time card system, file management, contact manager, mail client and 9 other modules ...featur...
CVE-1999-1294: Undefined Security Weakness
Office Shortcut Bar OSB in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that are started from the Shortcut Bar, which could allow local users to read folders for which they do not have permission...
CVE-1999-1267
KDE file manager kfm uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server...
CVE-1999-1267: Undefined Security Weakness
KDE file manager kfm uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server...
Midnight Commander
The Midnight Commander 4.5.51 latest. $ od -t x1 mcbug 0000000 03 14 77 04 0a $ mkdir cat mcbug $ mc try to view this directory - 'w' - 0x77 command will be executed; longer commands might be used, as well Obviously, this attack requires privledged user interaction. Midnight Commander won't displ...
