5883 matches found
hpreg-read.txt
The HP eSupportDiagnostics hpediag.dll exposes some methods that allow the reading of arbitrary files and registry values. hpediag.dll, version 1.0.11.0 PoC as follows: --------------------- function Check var out = fileUtil.ReadTextFilesomePath; var out = regUtil.ReadValuesomePath;...
[Full-disclosure] HP eSupportDiagnostics hpediags.dll Information Disclosure
The HP eSupportDiagnostics hpediag.dll exposes some methods that allow the reading of arbitrary files and registry values. hpediag.dll, version 1.0.11.0 PoC as follows: --------------------- html head script language="JavaScript" DEFER function Check var out = fileUtil.ReadTextFilesomePath; var o...
CVE-2007-6187
Multiple directory traversal vulnerabilities in PHP Content Architect aka NoAh 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the filepath parameter to 1 cssfile.php, 2 jsfile.php, or 3 xmlfile.php in noah/modules/nosystem/templates/...
CVE-2007-1662
Perl-Compatible Regular Expression PCRE library before 7.3 reads past the end of the string when searching for unmatched brackets and parentheses, which allows context-dependent attackers to cause a denial of service crash, possibly involving forward references...
CVE-2007-5811
CVE-2007-5811 affects phpMyConferences up to version 8.0.2, specifically the PageTraiteDownload.php component. The vulnerability is a directory traversal via the dir parameter (..), allowing reads of arbitrary files. The issue is disputed for 8.0.2 by a third party who notes the PHP code may be s...
CVE-2007-5337
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs...
Super star 0DAY it!!!! - Vulnerability warning-the black bar safety net
Is a 0day, the 0day year, today much more special. I would like to declare, not even fuzz to. Thanks Elf Super star reading system SSReader is the super star of the company with independent intellectual property rights of the Book Reader, is designed specifically for digital book reading,...
CVE-2007-5447
ioncubeloaderwin5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncubereadfile function...
Design/Logic Flaw
ioncubeloaderwin5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncubereadfile function...
CVE-2007-5447
CVE-2007-5447 affects ionCube Loader 6.5 for PHP 5.2.4. The ioncube_loader_win_5.2.dll does not enforce safe_mode or disable_functions, enabling context-dependent attackers to read arbitrary files via ioncube_read_file. This vulnerability is documented in the NVD entry for CVE-2007-5447 and is ec...
CVE-2007-5299
Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow remote attackers to read arbitrary files via a .. dot dot in the viewmode parameter to 1 featuredlist.php and 2 onlinelist.php in member/...
CVE-2007-4726
Web Oddity 0.09b contains a directory traversal vulnerability that lets remote attackers read arbitrary files via a .. in the request URI. The available documents identify the affected product and the vulnerability class but do not provide remediation steps. Exploitation details or patches are no...
soteesklep-disclose.txt
SOTEeSKLEP Remote File Disclosure Vulnerability Script : SOTEeSKLEP Versions: 3.1RC8, 3.5RC1, 3.5RC4, 3.5RC9, and i think other. Site : http://www.sote.pl Bug: ... if ! empty$REQUEST"file" $file=$REQUEST'file'; ... $filepath="$DOCUMENTROOT/themes/$config-lang/htmlfiles/$file"; if...
EUVD-2007-3241
Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to 1 include and execute arbitrary local files via a .. dot dot in the adminlang cookie to admin/functions.php or 2 read arbitrary local files via the img parameter to admin/showimg.php...
Chi Bo room billing system-free Internet access-vulnerability warning-the black bar safety net
My school electronic reading room available on this system. 搹 犸 欕 a? 曧 l ? 駥 ? Would have been sheer curiosity,in the online search a half a day also no results,had to their own research. Chamber 5 狌 d 倅? ��2?? 鑡? Where method A is theoperating systemof the problem,method, two, three, four is a...
Firefox 0day local file reading
Firefox 0day local file reading By Thor Larholm RSnake mentioned a potential way to read security sensitive configuration settings from Firefox on ha.ckers.org, with an example PoC from Sergey Vzloman that used the resource:// URL protocol handler in Firefox. Unfortunately, the settings that were...
EUVD-2007-2435
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read certain files via a .. dot dot in a URI containing a "\web-inf" sequence...
CVE-2007-2440
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to read certain files via a .. dot dot in a URI containing a "\web-inf" sequence...