70 matches found
SA-CONTRIB-2014-029 - Mime Mail - Access Bypass
The MIME Mail module allows to send MIME-encoded e-mail messages with embedded images and attachments. By default the module only allows files to be embedded or attached that are located in the public files directory. The module doesn't sufficiently check the file location, considering similar...
FreeBSD : drupal -- multiple vulnerabilities (d9649816-5e0d-11e3-8d23-3c970e169bc2)
Drupal Security Team reports : Multiple vulnerabilities were fixed in the supported Drupal core versions 6 and 7. - Multiple vulnerabilities due to optimistic cross-site request forgery protection Form API validation - Drupal 6 and 7 - Multiple vulnerabilities due to weakness in pseudorandom numb...
Nagios Looking Glass Addon for Nagios server/s3_download.php File Disclosure
The Nagios Looking Glass Addon for Nagios installed on the remote host is affected by a file disclosure vulnerability. By sending a specially crafted request to the Addon's 'server/s3download.php' script, a remote, unauthenticated attacker can leverage this vulnerability to obtain the contents of...
drupal -- multiple vulnerabilities
Drupal Security Team reports: Multiple vulnerabilities were fixed in the supported Drupal core versions 6 and 7. Multiple vulnerabilities due to optimistic cross-site request forgery protection Form API validation - Drupal 6 and 7 Multiple vulnerabilities due to weakness in pseudorandom number...
Safe Returner 1.27.5 Commandline Vulnerability
Exploit for windows platform in category local exploits ============================================== Safe Returner 1.27.5 Commandline Vulnerability ============================================== Exploit Title : Commandline vulnerability Date : 27 Oct 2010 Author : STRELiTZIA Software : Safe...
JV2 Folder Gallery 3.0 - Remote File Inclusion
Greatz to:AsB-MaY TeAm & HaCk.eGy & To0oFa ScRiPt:-http://foldergallery.jv2.net/download.php?file=foldergallery3.0.2 Discovered By:- ThE dE@Th template.php:- ExPlOiT: http://www.Site.com/JV2 Folder Gallery/gallery/theme/includemode/template.php?galleryfilesdir=Shell milw0rm.com 2007-01-31...
drupal -- multiple vulnerabilities
The Drupal team reports: Vulnerability: SQL injection A security vulnerability in the database layer allowed certain queries to be submitted to the database without going through Drupal's query sanitizer. Vulnerability: Execution of arbitrary files Certain -- alas, typical -- configurations of...
Authentication flaw
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account...
CVE-2005-3647
The CVE-2005-3647 issue is described as a local privilege-bypass in Folder Guard. Local users can bypass protections by running from or installing to the temporary files directory. Underlying cause: the temporary files path enables bypass of protections. Impact (per CVSS): partial confidentiality...
