BigACE 2.7.5 - 'LANGUAGE' Directory Traversal

source: https://www.securityfocus.com/bid/66350/info BIGACE Web CMS is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the application, access o...

Wireless Drive v1.1.0 iOS - Multiple Web Vulnerabilities

Document Title: =============== Wireless Drive v1.1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1229 Release Date: ============= 2014-03-18 Vulnerability Laboratory ID VL-ID: ====================================...

PHP file include vulnerability analysis-vulnerability warning-the black bar safety net

One, What is”remote file inclusion vulnerability”for? The answer is: the server through the php properties of a function to contain any files, since you want to include this file source filter is not strict, so can go to that contains a malicious file and we can construct the malicious file to...

McAfee ePolicy Orchestrator information leakage

Information leakage via XML include...

Application there is a file include vulnerability Unix systems-vulnerability warning-the black bar safety net

Found time: Vulnerability type: a file that contains Belongs the establishment of the station program: other Belongs to the server type: General Belongs to the programming language: other Description: The target Unix system, the application may exist in the file containing the vulnerability. 1. T...

Oracle Demantra 12.2.1 - Arbitrary File Disclosure

Exploit for windows platform in category web applications Details: The Team discovered a Local File Include LFI vulnerability. A file inclusion vulnerability occurs when a file from the target system is injected into a page on the attacked server page. The vulnerable page is: /demantra/GraphServl...

Oracle Demantra 12.2.1 - Arbitrary File Disclosure

Oracle Demantra 12.2.1 - Arbitrary File Disclosure Details: The Team discovered a Local File Include LFI vulnerability. A file inclusion vulnerability occurs when a file from the target system is injected into a page on the attacked server page. The vulnerable page is: /demantra/GraphServlet...

Oracle Demantra 12.2.1 - Arbitrary File Disclosure

Details: The Team discovered a Local File Include LFI vulnerability. A file inclusion vulnerability occurs when a file from the target system is injected into a page on the attacked server page. The vulnerable page is: /demantra/GraphServlet Impact: Impact can differ based on the exploitation and...

Bluetooth Photo Share Pro 2.0 iOS - Multiple Vulnerabilities

Bluetooth Photo Share Pro 2.0 iOS - Multiple Vulnerabilities Document Title: =============== Bluetooth Photo Share Pro v2.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1218 Release Date: ============= 2014-02-27...

Telekom Bug Bounty #12 - File Include Web Vulnerability

Document Title: =============== Telekom Bug Bounty 12 - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1178 Release Date: ============= 2014-02-26 Vulnerability Laboratory ID VL-ID: ==================================== 117...

Bluetooth Photo Share Pro v2.0 iOS - Multiple Vulnerabilities

Document Title: =============== Bluetooth Photo Share Pro v2.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1218 Release Date: ============= 2014-02-26 Vulnerability Laboratory ID VL-ID:...

Telekom Bug Bounty #12 - File Include Web Vulnerability

Document Title: =============== Telekom Bug Bounty 12 - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1178 Release Date: ============= 2014-02-26 Vulnerability Laboratory ID VL-ID: ==================================== 117...

Private Camera Pro 5.0 iOS - Multiple Vulnerabilities

Document Title: =============== Private Camera Pro v5.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1216 Release Date: ============= 2014-02-24 Vulnerability Laboratory ID VL-ID: ====================================...

WiFiles HD v1.3 iOS - File Include Web Vulnerability

Document Title: =============== WiFiles HD v1.3 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1214 Release Date: ============= 2014-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 1214...

WiFiles HD v1.3 iOS - File Include Web Vulnerability

Document Title: =============== WiFiles HD v1.3 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1214 Release Date: ============= 2014-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 1214...

Tinder Patches Vulnerability That Exposed User Locations

Developers with the popular dating application Tinder have fixed a vulnerability that up until last year could’ve allowed users to track other users, thanks to a hole in the app’s API and some old fashioned trigonometry. Max Veytsman, a Toronto-based researcher with Include Security disclosed the...

BIWEB门户版Getwebshell漏洞

简要描述： 厂商来不来？ 详细说明： wap/detail.php（还有好几处，修复时请留意） if !empty$GET'mod' $strModuleID = strval$GET'mod'; //此处未过滤 includeonce'../'.$strModuleID.'/config/var.inc.php'; //包含需截断 $objWebInit-setDBG$arrGPdoDB; $objWebInit-db; $arrLink = 'mod=' . $strModuleID; else includeonce'include/title.php';...

File Hub 1.9.1 iOS - Multiple Vulnerabilities

File Hub 1.9.1 iOS - Multiple Vulnerabilities Document Title: =============== File Hub v1.9.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1195 Release Date: ============= 2014-02-15 Vulnerability Laboratory ID VL-ID...

mbDriveHD 1.0.7 iOS - Multiple Vulnerabilities

mbDriveHD 1.0.7 iOS - Multiple Vulnerabilities Document Title: =============== mbDriveHD v1.0.7 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1198 Release Date: ============= 2014-02-14 Vulnerability Laboratory ID...

Office Assistant Pro 2.2.2 iOS - Local File Inclusion

Office Assistant Pro 2.2.2 iOS - Local File Inclusion Document Title: =============== Office Assistant Pro v2.2.2 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1197 Release Date: ============= 2014-02-13 Vulnerability...