EasyWeb 1.0 FileManager Module Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10792/info EasyWeb is prone to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. The issue occurs if a remote attacker sends a request to the...

CVE-2014-3782

Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the Media Manager in Dotclear before 2.6.3 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a 1 double extension or 2 .php5, 3 .phtml, or some other PHP file extension...

CVE-2014-3782

Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the Media Manager in Dotclear before 2.6.3 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a 1 double extension or 2 .php5, 3 .phtml, or some other PHP file extension...

CVE-2014-3782

Summary: CVE-2014-3782 affects Dotclear

CVE-2014-3782: Undefined Security Weakness

Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the Media Manager in Dotclear before 2.6.3 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a 1 double extension or 2 .php5, 3 .phtml, or some other PHP file extension...

DevExpress ASPxFileManager 10.2 13.2.8 - Directory Traversal

DevExpress ASPxFileManager 10.2 13.2.8 - Directory Traversal Advisory: Directory Traversal in DevExpress ASP.NET File Manager During a penetration test RedTeam Pentesting discovered a directory traversal vulnerability in DevExpress' ASP.NET File Manager and File Upload. Attackers are able to read...

DevExpress ASP.NET File Manager 13.2.8 Directory Traversal

DevExpress ASP.NET File Manager versions 10.2 through 13.2.8 suffer from a directory traversal vulnerability. Directory Traversal in DevExpress ASP.NET File Manager During a penetration test RedTeam Pentesting discovered a directory traversal vulnerability in DevExpress' ASP.NET File Manager and...

CVE-2014-3975

Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter...

CVE-2014-3974

Cross-site scripting XSS vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter...

AuraCMS 3.0 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Test...

AuraCMS 3.0 Cross Site Scripting / Local File Inclusion

Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS 3.0 Tested Local Platform : XAMP on...

AuraCMS 3.0 - Multiple Vulnerabilities

Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS 3.0 Tested Local Platform : XAMP on...

AuraCMS 3.0 - Multiple Vulnerabilities

AuraCMS 3.0 - Multiple Vulnerabilities Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS...

WordPress Photo-Gallery Cross Site Request Forgery Vulnerability

WordPress Photo-Gallery plugin suffers from a cross site request forgery vulnerability. Note that this finding houses site-specific data. + Wordpress Cross Site Request Forgery in Plugin photo-gallery + Date: 07/05/2014 + Risk: HIGH + Author: Felipe Andrian Peixoto + Vendor Homepage:...

eshtery CMS 'FileManager.aspx'本地文件泄漏漏洞

Bugtraq ID:65740 CVE ID:CVE-2014-2069 eshtery CMS是一款内容管理系统。 eshtery CMS不正确过滤用户的输入，允许远程攻击者利用漏洞提交请求读取系统任意文件内容。 0 eshtery CMS 目前没有详细解决方案提供： http://eshtery.she7ata.com/projects/eshtery/ http://www.example.com/path/FileManager.aspx?file=E:\web\admin.asp...

Wordpress WP-FileManager 1.3.0 File Disclosure

File disclosure vulnerability in WP-FileManager incl/libfile.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

CVE-2013-6042: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remote attackers to inject arbitrary web script or HTML via the user parameter...

WordPress-wp-FileManager-File-Download vulnerability using the method-vulnerability warning-the black bar safety net

Vulnerability details: the http://packetstormsecurity.com/files/121637/WordPress-wp-FileManager-File-Download.html Find vulnerabilities in websites: access to/wp-content/plugins/wp-filemanager/incl/libfile. php?& amp;path=../../&filename=wp-config. php&action=download, download wp-config, which...

Wordpress wp-FileManager Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Title: Wordpress wp-FileManager Local File Download Vulnerability Author: ByEge Download: http://wordpress.org/extend/plugins/wp-filemanager/ Test Platform: Linux Images: http://j1305.hizliresim.com/19/f/n0xxf.jpg Vuln. Plat.: Web Application...