webportalcms-upload.txt

S.W.A.T. Title: WebPortal = 0.7.4 fckeditor Remote Arbitrary File Upload Vendor: http://webportal.ivanoculmine.com/download.php?mid=14 Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable It In The Config File ; Site: wWw.SvvaT.IR - Exploit:...

WebPortal CMS 0.7.4 - 'FCKeditor' Arbitrary File Upload

S.W.A.T. Title: WebPortal = 0.7.4 fckeditor Remote Arbitrary File Upload Vendor: http://webportal.ivanoculmine.com/download.php?mid=14 Discover by : S.W.A.T. [email protected] Impact: Medium Fix: Disable It In The Config File ; Site: wWw.SvvaT.IR - Exploit:...

TFTP Server error packet buffer overflow

Added: 09/12/2008 CVE: CVE-2008-2161 BID: 29111 OSVDB: 44904 Background TFTP Server is an open source server implementation of the tftp protocol for multiple platforms. Problem A buffer overflow vulnerability in the handling of error packets allows remote attackers to execute arbitrary commands...

TransLucid 1.75 (fckeditor) Remote Arbitrary File Upload Vulnerability

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: TransLucid 1.75 fckeditor Remote Arbitrary File Upload Vendor: www.translucidonline.com Vulnerable Version: 1.75 prior versions also may be affected Exploitation: Remote with browser Exploit: Available...

Kim Websites 1.0 (fckeditor) Remote Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Kim Websites 1.0 fckeditor Remote Arbitrary File Upload Vulnerability ======================================================================= - Vulnerability: +--...

Kim Websites 1.0 - FCKeditor Arbitrary File Upload

Kim Websites 1.0 - FCKeditor Arbitrary File Upload S4rK3VT Hacking TEAM Title: KimWebsite fckeditor Remote Arbitrary File Upload Vendor: http://sourceforge.net/project/showfiles.php?groupid=196819 discover by : Ciph3r We Are : Ciph3r & Rake [email protected] Impact: Medium Fix: N/A Expl0te...

Kim Websites 1.0 - 'FCKeditor' Arbitrary File Upload

S4rK3VT Hacking TEAM Title: KimWebsite fckeditor Remote Arbitrary File Upload Vendor: http://sourceforge.net/project/showfiles.php?groupid=196819 discover by : Ciph3r We Are : Ciph3r & Rake [email protected] Impact: Medium Fix: N/A Expl0ters Security TEAM == www.Expl0iters.ir -...

Microsoft IE MHTML协议处理器跨域信息泄露漏洞（MS08-048）

BUGTRAQ ID: 30585 CVECAN ID: CVE-2008-1448 Internet Explorer是微软操作系统中默认捆绑的WEB浏览器。 IE的MHTML协议处理器没有正确地解释MHTML URI重新定向。如果以UNC的形式指定了URI的话，则没有正确的应用安全策略： \MACHINENAMEORIP\PATHTORESOURCE 在这种情况下当远程站点试图访问本地资源时，Internet Explorer会无法强制区提升限制；在浏览远程站点的时候Internet Explorer会无法应用正确地安全区权限，允许将属于较小权限区的站点处理为更高权限的区。...

NetApp Data ONTAP contains multiple vulnerabilities

Overview NetApp Data ONTAP contains multiple vulnerabilities. The most severe of these vulnerabilities may allow an attacker to execute commands, view sensitive data, or cause a system to crash. Description NetApp Data ONTAP contains multiple undisclosed vulnerabilities. --- Impact A remote,...

CVE-2008-1952

The backend for XenSource Xen Para Virtualized Frame Buffer PVFB in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service crash by mapping an arbitrary amount of guest memory...

eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/45 1. Description: eLineStudio...

eLineStudio Site Composer (ESC) 2.6 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/45 1. Description: eLineStudio...

PT-2008-1526 · Vsftpd +1 · Vsftpd +1

Name of the Vulnerable Software and Affected Versions: vsftpd version 2.0.5 Description: A memory leak issue exists, allowing remote attackers to cause a denial of service by consuming memory via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny file...

FireFTP filename directory traversal sequence vulnerability

Overview The FireFTP Mozilla Firefox extension contains a vulnerability that may allow an attacker to write files to arbitrary locations. Description FireFTP is a Firefox extension that provides FTP client functionality. Firefox extensions can run with Chrome privileges which allow them to...

CUPS integer overflow vulnerability

Overview CUPS contains an integer overflow that may allow a remote attacker to cause a vulnerable system to crash. Description The Common Unix Printing System CUPS is a print server that is used and distributed by many Unix-like operating systems. CUPS contains an integer overflow vulnerability...

UltraVNC buffer overflow vulnerability

Overview UltraVNC viewer contains a buffer overflow vulnerability. If exploited, this vulnerability may allow an attacker to execute arbitrary code. Description UltraVNC viewer is a remote desktop application that allows a user to control compatible VNC servers. The UltraVNC viewer includes a...

PT-2008-2438 · Etomite · Etomite

Name of the Vulnerable Software and Affected Versions: Etomite version 0.6.1.4 Final Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. The issue is disputed by the vendor, who claims the affected variable is $ SERVER'PHP SELF' and states...

PT-2007-6586 · Phpcms · Phpscms

Name of the Vulnerable Software and Affected Versions: phpSCMS versions 0.0.1-Alpha1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter in the includes/functions.php file. This is a remote file inclusion issue. Note that the identified code...

HPSBPI02265 SSRT3515 rev.2 - Re-release of HPSBMI00004 HP Jetdirect Running ftp, Advisory

Potential Security Impact Advisory VULNERABILITY SUMMARY Some security scanners generate warnings that the Jetdirect ftp directory is writable. RESOLUTION To restrict printing or suppress the security scanners warning, the ftp service can be disabled. To disable ftp, telnet to the Jetdirect devic...

PT-2007-6193 · Unknown · Online Fantasy Football League

Name of the Vulnerable Software and Affected Versions: Online Fantasy Football League OFFL version 0.2.6 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the DOC ROOT parameter in the lib/classes/offl nflteam.php file. However, it is noted that a FILE test...