Debian DSA-1816-1 : apache2 - insufficient security check

It was discovered that the Apache web server did not properly handle the 'Options=' parameter to the AllowOverride directive : - In the stable distribution lenny, local users could via .htaccess enable script execution in Server Side Includes even in configurations where the AllowOverride directi...

Demium CMS 0.2.1 Beta LFI / SQL Injection / Disclosure

Demium CMS, version 0.2.1 Beta, is prone to multiple remote vulnerabilities, because of insufficient security on it. Let's see them. In this advisory you can find vulnerabilities, afflicted source, and multiple Remote Exploit. Credits to : Giovanni Buzzin, Osirys Contact : osirysatautisticidotorg...

phpfss-traverse.txt

PHP File Sharing System - Directory traversal +--------------------------------------------+ Author: Jonas Thambert Date: 2007-10-13 URL: http://sourceforge.net/projects/phpfilesadmin/ Vendor Notified. Version: 1.5.1 latest - Description - PHP File Sharing System is vulnerable to directory...

QSSL Voyager 2.0 1B - Arbitrary File Access

QSSL Voyager 2.0 1B - Arbitrary File Access source: https://www.securityfocus.com/bid/1648/info The web server supplied with the QNX Voyager demo disk contains several vulnerabilities. First, Voyager will follow relative paths passed to it in requests. This includes ../ style paths, which will...