Buffer overflow

Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long filename when setting background music...

CVE-2007-3545

Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long filename when setting background music...

CVE-2007-3545

Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long filename when setting background music...

Directory traversal

Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary files via directory traversal sequences in the session ID, which is matched against an insufficiently restrictive regular expression before it is used to construct a filename th...

CVE-2007-2836

Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary files via directory traversal sequences in the session ID, which is matched against an insufficiently restrictive regular expression before it is used to construct a filename th...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...

CVE-2007-3432

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...

CVE-2007-3432

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...

Design/Logic Flaw

cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an instant message as the beginning of the .dat file name when the 1 imview2 or 2 imview3 function reads a an internal IM, or a message from a b guest or c removed member, which has unknown impact and...

edocstore-sql.txt

--==+================================================================================+==-- --==+ eDocStore Latest Versions Local File Inclusion Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog good work xprog...

SHTTPD V1.38 server source code disclosure

SHTTPD V1.38 server source code disclosure ------------------------------------ link:http://shttpd.sourceforge.net/ info: The vulnerability is caused due to a parser error of the filename extension supplied by the user in the URL. This can be exploited to retrieve the source code of script files...

SHTTPD 1.38 - Filename Parse Error Information Disclosure

source: https://www.securityfocus.com/bid/24618/info SHTTPD is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects SHTTPD 1.38; other versions may also be affected...

SiteDepth CMS 3.44 (ShowImage.php name) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== SiteDepth CMS 3.44 ShowImage.php name File Disclosure Vulnerability ===================================================================== Sitedepth CMS 3.44 Local File...

SHTTPD 1.38 - Filename Parse Error Information Disclosure

SHTTPD 1.38 - Filename Parse Error Information Disclosure source: https://www.securityfocus.com/bid/24618/info SHTTPD is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects SHTTPD...

SiteDepth CMS 3.44 - 'ShowImage.php?name' File Disclosure

Sitedepth CMS 3.44 Local File Include LFI Exploit ! Application homepage : http://www.sitedepth.com/ ! Author : H4 / Team XPK ! Contact : [email protected] ! Bug discovered : 2006-11-07 ! Bug published : 2007-06-25 --------------------------------------------------------------------- Vuln. code:...

Design/Logic Flaw

MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...

CVE-2007-3365

MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...

CVE-2007-3365

Affected software: MyServer ≤ 0.8.9. Vulnerability: improper handling of uppercase characters in filename extensions. Impact: remote attackers can obtain sensitive information, including script source code, via a modified extension. Evidence from connected docs: description confirms the issue and...

CVE-2007-3365

MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...

Stack overflow

Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 English Trial, and 2.0 with Portable Executable Viewer 1.00 English Trial, allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE file...