DOMIT! RSS testing_domitrss.php discloses local files

Overview A vulnerability in DOMIT! RSS allows an attacker to read local files. Description DOMIT! RSS is an RSS parser for PHP. DOMIT! RSS includes a test script called testingdomitrss.php. This script writes out the contents of any user-supplied URL to a local file named the MD5 hash of the URL...

Chrome for Android - Bypassing SOP for Local Files By Symlinks

CVE Number: CVE-2012-4908 Title: Chrome for Android - Bypassing SOP for Local Files By Symlinks Affected Software: Confirmed on Chrome for Android v18.0.1025123 Credit: Takeshi Terada Issue Status: v18.0.1025308 was released which fixes this vulnerability Overview: Chrome for Android's Same-Origi...

DokuWiki: Multiple vulnerabilities

Background DokuWiki is a simple to use Wiki aimed at a small company’s documentation needs. Description Multiple vulnerabilities have been discovered in DokuWiki. Please review the CVE identifiers referenced below for details. Impact The vulnerabilities might allow an attacker to disclose local...

Code injection

Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error page...

CVE-2012-6469

CVE-2012-6469 affects the Opera browser. The primary detail in the Initial Document states Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors in an error page. The connected OpenVAS entries list CVE-2012-6469 as part of a set of Opera vulner...

Banana Dance B.2.6 Inclusion / Access Control / SQL Injection

Advisory ID: HTB23118 Product: Banana Dance Vendor: bananadance.org Vulnerable Versions: B.2.6 and probably prior Tested Version: B.2.6 Vendor Notification: October 3, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: PHP File Inclusion CWE-98, Improper Access Control CWE-284, SQL...

KLA10384 RLF vulnerability in VMware View

A directory traversal vulnerability was found in VMware Viewer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via unspecified vectors. Original advisories VMware bulletin Related products VMware-View CVE list CVE-2012-597...

F5 FirePass SSL VPN information leakage

CitrixAuth.php local files inclusion...

Greenstone - Multiple Vulnerabilities

Greenstone - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/56662/info Greenstone is prone to the following security vulnerabilities: 1. A file-disclosure vulnerability 2. A cross-site scripting vulnerability 3. A security weakness 4. A security-bypass vulnerability Attackers...

Greenstone - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/56662/info Greenstone is prone to the following security vulnerabilities: 1. A file-disclosure vulnerability 2. A cross-site scripting vulnerability 3. A security weakness 4. A security-bypass vulnerability Attackers can exploit these issues to view local...

GLSA-201211-01 : MantisBT: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201211-01 MantisBT: Multiple vulnerabilities Multiple vulnerabilities have been discovered in MantisBT. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could exploit these vulnerabilities...

Amateur Photographer's Image Gallery - 'force-download.php?File' Information Disclosure

source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...

Directory traversal

Directory traversal vulnerability in index.php in phpPaleo 4.8b180 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the phppaleo4lang cookie, a different vulnerability than CVE-2012-1671. NOTE: the provenance of this information is unknown; the details are...

CVE-2012-5331

Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. dot dot in the page parameter to index.php...

Directory traversal

Directory traversal vulnerability in index.php in phpPaleo 4.8b155 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Directory traversal

Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. dot dot in the page parameter to index.php...

CVE-2012-5331

Directory traversal vulnerability in asaanCart 0.9 allows remote attackers to include arbitrary local files via a .. dot dot in the page parameter to index.php...

CVE-2012-0987

Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the icmsConfigPluginssanitizerplugins parameter...

Medium: postgresql8

Issue Overview: It was found that the optional PostgreSQL xml2 contrib module allowed local files and remote URLs to be read and written to with the privileges of the database server when parsing Extensible Stylesheet Language Transformations XSLT. An unprivileged database user could use this fla...

Directory traversal

Directory traversal vulnerability in acp/index.php in AneCMS allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...