Accellion File Transfer - 'Appliance web_client_user_guide.html?lang' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/38176/info Accellion File Transfer Appliance is prone to multiple remote vulnerabilities, including: - Multiple privilege-escalation issues - A directory-traversal issue - An HTML-injection issue - A remote command-injection issue An attacker may leverage...

Apache mod_proxy_ftp远程命令注入漏洞

Bugraq ID: 36254 Apache modproxyftp是一款用于处理FTP代理请求的Apache模块。 Apache modproxyftp不正确过滤用户输入数据，远程攻击者可以利用漏洞以应用程序安全上下文执行任意命令。 Intevydis公司发布的商业漏洞利用工具已经提供相关的攻击信息。目前没有详细漏洞细节提供。 Apache Software Foundation modproxyftp 厂商解决方案: 目前没有解决方案提供： http://httpd.apache.org/docs/2.0/mod/modproxyftp.html...

StoneTrip S3DPlayers remote command injection

StoneTrip S3DPlayers remote command injection 1. Advisory Information Title: StoneTrip S3DPlayers remote command injection Advisory Id: CORE-2009-0401 Advisory URL: Date published: 2009-05-28 Date of last update: 2010-05-18 Vendors contacted: StoneTrip Release mode: User release 2. Vulnerability...

Nagios 3.0.6 - 'statuswml.cgi' Arbitrary Shell Command Injection

source: https://www.securityfocus.com/bid/35464/info Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running th...

NC GBook 1.0 Command Injection

-------------------------------------------------------------- NC GBook 1.0 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-gaestebuch.com Thank You Very Much His0k4...

NC LinkList 1.3.1 Command Injection

-------------------------------------------------------------- NC LinkList 1.3.1 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-linkverzeichnis.de Thank You Very Much His0k4 Note: You Can choose Any Functi...

NC GBook 1.0 Remote Command injection Exploit

No description provided by source. -------------------------------------------------------------- NC GBook 1.0 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-gaestebuch.com Thank You Very Much His0k4...

NC LinkList 1.3.1 Remote Command Injection Exploit

No description provided by source. -------------------------------------------------------------- NC LinkList 1.3.1 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-linkverzeichnis.de Thank You Very Much...

NC GBook 1.0 - Remote Command Injection

NC GBook 1.0 - Remote Command Injection -------------------------------------------------------------- NC GBook 1.0 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-gaestebuch.com Thank You Very Much His0k4...

NC LinkList 1.3.1 Remote Command Injection Exploit

Exploit for unknown platform in category web applications ================================================== NC LinkList 1.3.1 Remote Command Injection Exploit ================================================== -------------------------------------------------------------- NC LinkList 1.3.1 Remot...

NC LinkList 1.3.1 - Remote Command Injection

NC LinkList 1.3.1 - Remote Command Injection -------------------------------------------------------------- NC LinkList 1.3.1 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-linkverzeichnis.de Thank You Ver...

NC GBook 1.0 Remote Command injection Exploit

Exploit for unknown platform in category web applications ============================================= NC GBook 1.0 Remote Command injection Exploit ============================================= -------------------------------------------------------------- NC GBook 1.0 Remote Command injection...

NC LinkList 1.3.1 - Remote Command Injection

-------------------------------------------------------------- NC LinkList 1.3.1 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-linkverzeichnis.de Thank You Very Much His0k4 Note: You Can choose Any Functi...

NC GBook 1.0 - Remote Command Injection

-------------------------------------------------------------- NC GBook 1.0 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-gaestebuch.com Thank You Very Much His0k4...

Debian: Security Advisory (DSA-1711-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1711-1 typo3-src - remote code execution

Bulletin has no description...

SEC Consult SA-20081219-0 :: Fujitsu-Siemens WebTransactions remote command injection vulnerability

SEC-CONSULT Security Advisory 20081219-0 =================================================================================== title: Fujitsu-Siemens WebTransactions Remote Command Injection Vulnerability program: WebTransactions vulnerable version: =7.1 homepage: http://www.fujitsu-siemens.com/...

CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability

CA BrightStor ARCServe BackUp Message Engine Remote Command Injection Vulnerability by cocoruderfrankruderathotmail.com http://ruder.cdut.net Summary: CA BrightStor ARCServe BackUp is an overall data backup solution. The RPC interface of CA BrightStor ARCServe BackUp does not handle user's input...

Shopping Basket Professional vulnerable to OS command injection

Overview Shopping Basket Professional provided by CGI RESCUE contains a vulnerability which allows a remote attacker to inject an arbitrary OS command as it does not properly validate input data. Impact A remote attacker could execute an arbitrary OS command on the server where Shopping Basket...

Xerox WorkCentre Multiple Samba Vulnerabilities (XRX08-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly is affected by multiple buffer overflow and remote command injection issues. Using specially- crafted RPC requests, an unauthenticated attacker could leverage these issues to run...