cPanel < 11.30.2 Multiple CSRF Vulnerabilities

No description provided by source. + Info================================================================= - Exploit Title: cPanel 11.30.2 Multiple CSRF Vulnerabilities - Author: Net.Edit0r - Home : Black-HG.Org h4ckcity.org - Version: 11.30.2 - Software Link: http://cpanel.net - Email :...

Tugux CMS 1.2 (pid) Remote Arbitrary File Deletion Vulnerability

Summary Tugux CMS is a free, open-source content Management system CMS and application that powers the entire web. Description Input passed to the 'pid' parameter in administrator/deletepageparse.php is not properly sanitised before being used to delete files. This can be exploited to delete file...

Design/Logic Flaw

shared/inc/sql/ssh.php in the SSH accounts management implementation in Domain Technologie Control DTC before 0.32.9 allows remote authenticated users to delete arbitrary accounts via the edsshaccount parameter in a deletesshaccount Delete action...

tomcat: unexpected file deletion in work directory

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename...

tomcat: unexpected file deletion in work directory

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename...

PT-2010-1277 · Apache +2 · Apache Tomcat +2

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 5.5.0 through 5.5.28 Apache Tomcat versions 6.0.0 through 6.0.20 Description: The issue allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename. When deploying WAR file...

Jorp 1.3.05.09 - Arbitrary Remove Projects/Tasks

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | GET vars 'x'...

Pivot 1.40.6 Remote Arbitrary File Deletion Vulnerability

Exploit for unknown platform in category web applications ========================================================= Pivot 1.40.6 Remote Arbitrary File Deletion Vulnerability ========================================================= Pivot 1.40.6 Remote File Delete Alfons Luja Vuln :...

PT-2009-3042 · Max · Max.Blog

Name of the Vulnerable Software and Affected Versions: Max.Blog version 1.0.6 Description: The issue concerns improper access restriction in the delete.php file, allowing remote attackers to delete arbitrary blog posts by making a direct request. Recommendations: For Max.Blog version 1.0.6,...

GuildFTPd 0.999.14 File Delete Exploit

!/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.999.14 Remote Delete Files download module: http://www.infos-du-net.com/telecharger/GuildFTPD,0301-3342.html The vulnerability is located in the syntax "..", it can delete a file int he subdirectory Syntax in a console = DEL ..\test.txt...

CVE-2008-1627

CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in privmsg.php in phpBB 2.0.22 allows remote attackers to delete private messages PM as arbitrary users via a deleteall action...

Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability

Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability by NBBN Founed: December 2007 Type: Cross-Site Request Forgery Code: html head /head body onLoad="javascript:document.it.submit" form action="http://localhost/xampp/wbb2/modcp.php" method="post" name="it" input type="hidden"...

CVE-2007-6618

JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified filter ID...

DEBIAN-CVE-2007-2836

Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary files via directory traversal sequences in the session ID, which is matched against an insufficiently restrictive regular expression before it is used to construct a filename th...

CVE-2007-2170

The APPLSYS.FNDDMNODES package in Oracle E-Business Suite does not check for valid sessions, which allows remote attackers to delete arbitrary nodes. NOTE: due to lack of details from Oracle, it is not clear whether this issue is related to other CVE identifiers such as CVE-2007-2126,...

CVE-2006-5212

CVE-2006-5212 affects Trend Micro OfficeScan in multiple editions: OfficeScan 6.0 CSM SMB 2.0 before 6.0.0.1385; OfficeScan Corporate Edition (OSCE) 6.5 before 6.5.0.1418; OfficeScan 7.0 before 7.0.0.1257; and OfficeScan 7.3 before 7.3.0.1053. The vulnerability allows a remote attacker to delete ...

CVE-2002-1730

CVE-2002-1730 affects ASPjar Guestbook 1.00, where remote attackers can delete arbitrary messages by accessing the delete.asp administrative script with certain cookie values set to "true". The vulnerability is documented in the CVE entry and is referenced by NVD entries and CVE lists. The core i...

CVE-2002-1730

ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to "true"...

CVE-2005-1947

Cross-site request forgery CSRF vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the 1 albums or 2 delimg actions...