RunCMS < 1.5.3 debug_show.php Multiple Vulnerabilities

The installed version of RunCMS fails to validate input to the 'class/debug/debugshow.php' script. An unauthenticated attacker may be able to leverage this issue to manipulate SQL queries or to determine information about local files on the affected host. %NASLMINLEVEL 70300 C Tenable Network...

JChit counter 1.0.0 (imgsrv.php ac) Remote File Disclosure Vulnerability

No description provided by source. Y! Underground Group http://2600.ir -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=- Portal.......: jchit counter v1.0.0 Download.....: http://developers.jccorp.net Type.........: Remot...

TorrentFlux 2.2 - downloaddetails.php Local File Disclosure

TorrentFlux 2.2 - downloaddetails.php Local File Disclosure Description: TorrentFlux fails to sanitise the variable "alias" in downloaddetails.php. This allows an attacker to include any file they want; the contents is displayed at in the spaces provided and the remaning data is displayed as erro...

TorrentFlux 2.2 (downloaddetails.php) Local File Disclosure Exploit

Exploit for unknown platform in category web applications =================================================================== TorrentFlux 2.2 downloaddetails.php Local File Disclosure Exploit =================================================================== Description: TorrentFlux fails to...

TorrentFlux 2.2 (downloaddetails.php) Local File Disclosure Exploit

No description provided by source. Description: TorrentFlux fails to sanitise the variable "alias" in downloaddetails.php. This allows an attacker to include any file they want; the contents is displayed at in the spaces provided and the remaning data is displayed as error messages on the page...

TorrentFlux 2.2 - 'downloaddetails.php' Local File Disclosure

Description: TorrentFlux fails to sanitise the variable "alias" in downloaddetails.php. This allows an attacker to include any file they want; the contents is displayed at in the spaces provided and the remaning data is displayed as error messages on the page. Overall Torrentflux makes it look...

timate HelpDesk (XSS/Local File Disclosure) Vulnerabilities

No description provided by source. Title : Ultimate HelpDesk All Version Source/XSS Vulnerabilities Author : ajann Contact : : Login Before Vulnerabilities.: SOURCE------------------------------------------------------ http://target/path//getfile.asp?filename=SQL Example:...

Ultimate HelpDesk - Cross-Site Scripting Local File Disclosure

Ultimate HelpDesk - Cross-Site Scripting Local File Disclosure Title : Ultimate HelpDesk All Version Source/XSS Vulnerabilities Author : ajann Contact : : Login Before Vulnerabilities.: SOURCE------------------------------------------------------ http://target/path//getfile.asp?filename=SQL...

Ultimate HelpDesk (XSS/Local File Disclosure) Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Ultimate HelpDesk XSS/Local File Disclosure Vulnerabilities ============================================================= Title : Ultimate HelpDesk All Version Source/XSS...

Ultimate HelpDesk (XSS/Local File Disclosure) Vulnerabilities

No description provided by source. Title : Ultimate HelpDesk All Version Source/XSS Vulnerabilities Author : ajann Contact : : Login Before Vulnerabilities.: SOURCE------------------------------------------------------ http://target/path//getfile.asp?filename=SQL Example:...

Ultimate HelpDesk - Cross-Site Scripting / Local File Disclosure

Title : Ultimate HelpDesk All Version Source/XSS Vulnerabilities Author : ajann Contact : : Login Before Vulnerabilities.: SOURCE------------------------------------------------------ http://target/path//getfile.asp?filename=SQL Example: //getfile.asp?filename=../index.asp...

RHEL 3 / 4 : squirrelmail (RHSA-2006:0547)

An updated squirrelmail package that fixes a local file disclosure flaw is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. A local file disclosure flaw was found ...

walla30.txt

Application: Walla TeleSite Vendors: http://www.walla.co.il Versions: 3.0 and perior Platforms: Windows ISAPI, a few vulnerabilities apply Linux too Bug: Multiple Vulnerabilities Exploitation: Remote with browser Date: 13 Nov 2005 Author: Rafi Nahum, Pokerface e-mail: [email protected] web: N...

Hardened-PHP Project Security Advisory 2005-21.80

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in PHPKIT Release Date: 2005/11/07 Last Modified: 2005/11/04 Author: Christopher Kunz Application: PHPKIT 1.6.1 R2 and prior Severity: Cross-Site...

phpSecurePages cfgProgDir Variable File Include Vulnerabilities

The remote host is running phpSecurePages, a PHP module used to secure pages with a login name / password. The installed version of phpSecurePages allows remote attackers to control the 'cfgProgDir' variable used when including PHP code in several of the application's scripts. By leveraging this...

GNU GNATS 4.0/4.1 - Gen-Index Arbitrary Local File Disclosure/Overwrite

source: https://www.securityfocus.com/bid/14169/info GNU GNATS gen-index allows local attackers to disclose and overwrite arbitrary files. A successful attack can result in privilege escalation and a complete compromise of the affected computer as gen-index is installed with setuid permissions. G...

Mambo Open Source < 4.5.2.3 Multiple Vulnerabilities

The installed version of Mambo Open Source on the remote host suffers from the following flaws : - Session ID Spoofing Vulnerability An unspecified flaw in the script 'administrator/index3.php' can be exploited to spoof session IDs. - Local File Disclosure Vulnerability The...

PHPMyVisites 1.3 - 'Set_Lang' File Inclusion

source: https://www.securityfocus.com/bid/13370/info phpMyVisites allows attackers to include arbitrary files. While it has been demonstrated that local files may be included through this vulnerability, there is an unconfirmed possibility of remote file inclusion. Exploitation could disclose loca...

CVE-2005-0588: Undefined Security Weakness

Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system...

Firefox < 1.0.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 1.0.0. Such versions have multiple vulnerabilities that could result in a denial of service, local file disclosure, or password disclosure. These vulnerabilities are due to the fact that Firefox does handle the tag correctly. C Tenable Network...