184 matches found
IIS7物理路径泄露
No description provided by source...
PHP3 Physical Path Disclosure via POST Requests
The version of PHP3 running on the remote host will reveal the physical path of a given script when sent a HTTP POST request without a content-type header if it is incorrectly configured. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...
Imperva SecureSphere Operations Manager 9.0.0.5 - Multiple Vulnerabilities
No description provided by source. Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt =============================== - Advisory - =============================== Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issu...
John Roy Pi3Web 1.0.1 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2381/info A buffer overflow vulnerability has been reported in John Roy Pi3Web web server. The ISAPI application within the server fails to properly handle user supplied input. Requesting a specially crafted URL will caus...
Brightstation Muscat 1.0 Root Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2374/info Making an invalid request to a machine running Brightstation Muscat, will disclose the physical path to the root directory. http://target/cgi-bin/empower?DB=UkRteamHole http://target/cgi-bin/empower?DB=UkRteamHo...
DS3 Authentication Server - Multiple Vulnerabilities
No description provided by source. Original: http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt =============================== - Advisory - =============================== Tittle: DS3 Authentication Server - Command Execution Post Authentication & other minor issues Risk: High Date:...
IBM Net.Data 7.0 Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2017/info IBM Net.Data is a scripting language used to create web applications, it supports a wide range of language environments and is compatible with most recognized databases. Net.Data contains a vulnerability which...
U-mail 最新版漏洞大阅兵(信息泄露，多个getshell，多处SQL注入漏洞，远程代码执行)
简要描述： 疯狗、 xsser finger求打雷 详细说明： 注：一个getshell重复 http://wooyun.org/bugs/wooyun-2014-059954 疯狗、 xsser finger求打雷 1、 信息泄露 phpinfo信息泄露 http://www.xxx.com/webmail/client/mail/index.php?module=test&action=info phpinfo信息泄露 其中源码如下：WorldClient\html\client\mail\module\info.php if !defined "PRELOADOK" exit...
U-Mail injection of arbitrary code written in exp-vulnerability warning-the black bar safety net
u-mail in a file since the parameter filter is not rigorous and resulted inSQL injection by this vulnerability can be your shell to write to a web directory, you can batch getshell it. Baidu & Google Keywords: --------------------- Power by U-Mail Accurate anti-spam, effectively filtering more th...
Imperva SecureSphere Operations Manager 9.0.0.5 - Multiple Vulnerabilities
Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt =============================== - Advisory - =============================== Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issues Risk: High Date: 27.May.2013...
DS3 Authentication Server Command Execution Vulnerability
DS3 Authentication Server suffers from path disclosure and remote command execution vulnerabilities. Tittle: DS3 Authentication Server - Command Execution Post Authentication & other minor issues Risk: High Date: 27.May.2013 Author: Pedro Andujar .: INTRO :. The DS3 Authentication Server applianc...
Imperva SecureSphere Operations Manager Command Execution Vulnerability
Imperva SecureSphere Operations Manager version 9.0.0.5 Enterprise Edition suffers from path disclosure, command execution, and arbitrary file upload vulnerabilities. Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issues Risk: High Date: 27.May.201...
Imperva SecureSphere Operations Manager Command Execution
Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt =============================== - Advisory - =============================== Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issues Risk: High Date: 27.May.2013...
Imperva SecureSphere Operations Manager version 9.0.0.5 - Multiple issues
Original: http://www.digitalsec.net/stuff/explt+advs/Imperva-SecureSphere.OptMgr.txt =============================== - Advisory - =============================== Tittle: Imperva SecureSphere Operations Manager - Command Execution Post Authentication & Minor issues Risk: High Date: 27.May.2013...
DS3 Authentication Server - Multiple Issues
Original: http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt =============================== - Advisory - =============================== Tittle: DS3 Authentication Server - Command Execution Post Authentication & other minor issues Risk: High Date: 27.May.2013 Author: Pedro Andujar .:...
discuz X2. 5 latest vulnerability,a neglected physical path of the leak-vulnerability warning-the black bar safety net
Before everyone's attention that both the physical path of the leak: Before the two physical path of the leak address: http://www.myhack58.com/ucserver/control/admin/db.php http://www.myhack58.com/source/plugin/myrepeats/table/tablemyrepeats.php Actually install here also hide one, some people...
Shop treasure self-help built Station system command execution-vulnerability warning-the black bar safety net
Brief description: struct command execution, root permissions, the database can be connected, the number of users large Detailed description: http://login.ctoshop.com/shopsystemF/checkLogin.action Vulnerability proof: The website physical path: /home/webserver/shopsystemF java. home:...
shopex v4. x proof of the physical path-vulnerability warning-the black bar safety net
Brief description: The buffer data file the content is too messy, syntax errors result in the explosion path Detailed description: /home/cache/cachedata.php the buffer data file broke the physical path Vulnerability proof: ! Repair solutions: Direct exit orweb serverforbidden error is returned...
Tech-ex 6. x - 7.06 SQL injection vulnerability-vulnerability warning-the black bar safety net
Author:my5t3ry Reprinted please specify: t00ls. The vulnerability is located in the registration page\User\Reg\RegAjax. asp 2 4 - 4 6-row and 2 5 4 -270 lines of code as follows: Code omitted.... and The above code in the Province=UnEscapeKS. S"Province" call a custom function KS. S were filtered...