EUVD-2011-3755

Malware in sbrugna...

CVE-2011-3798

Rapid Leech 2.3-v42-svn322 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by classes/pear.php and certain other files...

CVE-2011-3798

Rapid Leech 2.3-v42-svn322 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by classes/pear.php and certain other files...

Information disclosure

Rapid Leech 2.3-v42-svn322 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by classes/pear.php and certain other files...

CVE-2011-3798

Rapid Leech 2.3-v42-svn322 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by classes/pear.php and certain other files...

CVE-2011-3798

Mode C: The CVE-2011-3798 entry concerns Rapid Leech 2.3-v42-svn322. The vulnerability allows remote attackers to disclose sensitive information by requesting a specific PHP file directly, causing an error message to reveal the installation path (illustrated by files such as classes/pear.php). Th...

CVE-2011-3798: Exposure of Sensitive Information to an Unauthorized Actor

Rapid Leech 2.3-v42-svn322 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by classes/pear.php and certain other files...

Rapid Leech Upload函数多个输入验证漏洞

BUGTRAQ ID: 34119 Rapid Leech是很多站点都在使用的免费服务器端文件传输脚本。 Rapidleech没有对下载文件的路径执行检查，包含有base64编码绝对路径的文件路径可能指向服务器上的任意文件，因此远程攻击者可以通过GET方式提交恶意filename参数访问服务器上的任意文件，如/etc/passwd。...