991 matches found
PhpWind anti-theft chain plug-in Showpic. php local file read vulnerability-vulnerability warning-the black bar safety net
Vulnerability file: showpic.php str=$SERVER'QUERYSTRING'; $img=base64decode$str; $codelen=strlen$safeguard;//get the additional code length $img=substr$img,$codelen; //remove the additional code readfile$img; Submitted parameters are base64 encoded directly using readfile to read the file,so you...
openmedia.txt
openmadia exploit local read file ========================================== search google powered by openmedia ====================================== Exploit : http://www.site.com/page.php?src=../../../../../etc/passwd http://www.site.com/searchform.php?lang=fr&format=../../../../../etc/passwd...
CVE-2006-6242
Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. dot dot sequence in the serendipitycharset parameter in 1 include/lang.inc.php; or to plugins/ scripts 2...
CVE-2006-2449
KDE Display Manager KDM in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login...
Loudblog 0.41 SQL Injection, Local file read/include
"Loudblog is a sleek and easy-to-use Content Management System CMS for publishing media content on the web." SQL Injection in podcast.php magicquotes=off: http://target/loudblog/podcast.php?id=1' and '1'='0' union select...
CVE-2005-0259
CVE-2005-0259 affects phpBB 2.0.11 (and possibly other versions) where enabling remote avatars and avatar uploading allows local users to read arbitrary files by providing both a local and remote avatar location and setting the “Upload Avatar from a URL:” field to reference the target file. Root ...
CVE-2002-1270
Mac OS X 10.2.2 is affected by CVE-2002-1270: local users can read files that are intended to be writable only. The root cause is related to the map_fd() Mach system call, enabling reading of restricted files rather than only writing. The vulnerability is local, with low base score (2.1 in NVD) a...
CVE-2002-1199
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments...
PT-2004-2957 · Isearch · Isearch +1
Name of the Vulnerable Software and Affected Versions: RiSearch version 1.0.01 RiSearch Pro version 3.2.06 Description: The issue allows remote attackers to use the show.pl script as an open proxy or read arbitrary local files by setting the url parameter to a http://, ftp://, or file:// URL...
HP-UX 10.20 - registrar Local Arbitrary File Read
HP-UX 10.20 - registrar Local Arbitrary File Read source: https://www.securityfocus.com/bid/1919/info The registrar service that ships with version 10.20 possibly others of HP's HP-UX operating system contains a vulnerability that may allow a local user to read any file on the hosts filesystem. T...