MegaBrowser 0.3 HTTP Directory Traversal File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7802/info The MegaBrowser HTTP server component is prone to a file disclosure vulnerability. Directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are...

Youyax 包含漏洞一枚。

简要描述： 过滤不严。 详细说明： 在org/youyax.php中 private function deal$tp if isset$COOKIE'youyaxlang' $this-lang = require"lang/" . $COOKIE'youyaxlang' . "/lang.php"; $this-arrayarray'lang' = $this-lang; else 这里$COOKIE'youyaxlang'可控 然后看到了包含中。 然后截断掉后面的lang.php 就可以包含任意文件了。 漏洞证明： 我直接在根目录下新建一个1.jpg 内容为phpinfo...

CVE-2014-2865

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a '\0' character, as demonstrated by using this character within a pathname on the drive containing the web root directory of a ColdFusion installation...

CVE-2014-2865

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a '\0' character, as demonstrated by using this character within a pathname on the drive containing the web root directory of a ColdFusion installation...

QNX - '.Phgrafx' File Enumeration

source: www.securityfocus.com/bid/66098/info QNX Phgrafx is prone to a file-enumeration weakness. An attacker can exploit this issue to enumerate the files present in the system's root directory; this may aid in further attacks. QNX 6.5.0 SP1, 6.5.0, 6.4.1, 6.3.0, and 6.2.0 are vulnerable; other...

Updated subversion packages fix CVE-2014-0032

Updated subversion packages fix security vulnerability: The moddavsvn module in Apache Subversion before 1.8.8, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service crash via an OPTIONS request CVE-2014-0032. The package has been patched to correct this issue...

MGASA-2014-0104 Updated subversion packages fix CVE-2014-0032

Updated subversion packages fix security vulnerability: The moddavsvn module in Apache Subversion before 1.8.8, when SVNListParentPath is enabled, allows remote attackers to cause a denial of service crash via an OPTIONS request CVE-2014-0032. The package has been patched to correct this issue...

CVE-2013-0262

rack/file.rb Rack::File in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATHINFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path...

YourPHP CMS several security vulnerabilities and repair method-vulnerability warning-the black bar safety net

YourPHP CMS now online also no, the official Demo is not yet up, but last night found that map, do not say The first place ! Linux root directory ! The amount of this is a bunch of sub-directories, you can next to the station to see ! Screenshot of the address the order, but does not affect the...

CVE-2012-3974

Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 on Windows allows local users to gain privileges via a Trojan horse executable file in a root directory...

CVE-2012-4680

CVE-2012-4680 is a directory-traversal vulnerability in IOServer’s XML Server prior to version 1.0.19.0. When the Root Directory pathname lacks a trailing backslash, remote attackers can read arbitrary files or list directories via a .. in the URI. The issue affects IOServer XML Server components...

Microsoft IIS file enumeration vulnerability-vulnerability warning-the black bar safety net

Release date: 2012-06-30 Update date: 2012-07-03 Affected system: Microsoft IIS 7.5 Microsoft IIS 7.0 Microsoft IIS 6.0 Microsoft IIS 1.0 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 4 2 5 1 Internet Information Services（IIS, the...

Network century interconnect document signature system judicial Edition upload vulnerability-vulnerability warning-the black bar safety net

Network century interconnect document receipt system of Justice Edition through the kill upload vulnerability google search: inurl:qtdisp. asp? dispid= The source code root directory vulnerability file infile. asp can customize the file Vulnerabilities pass to kill infile. asp? filename=xiaolu...

PacketVideo TwonkyServer Directory Traversal

The PacketVideo TwonkyServer listening on the remote host is affected by a directory traversal vulnerability that can allow for a remote attacker to view the contents of files located outside of the server's root directory by sending a URI that contains directory traversal characters. The issue i...

coppermine -- Multiple vulnerabilities

The Coppermine Team reports: The release covers several path disclosure vulnerabilities. If unpatched, it's possible to generate an error that will reveal the full path of the script. A remote user can determine the full path to the web root directory and other potentially sensitive information...

WordPress Zingiri 2.2.3 Code Execution

get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45. $selectedDocuments$key = $POST'value'; 46. $sessionAction-set$selectedDocuments; 47. 48. 49. echo...

hbase-master-info NSE Script

Retrieves information from an Apache HBase Hadoop database master HTTP status page. Information gathered: Hbase version Hbase compile date Hbase root directory Hadoop version Hadoop compile date Average load Zookeeper quorum server Associated region servers Script Arguments slaxml.debug See the...

Calibre E-Book Reader - Local Privilege Escalation (1)

!/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi and look at the array of silly things done, only one ...

YaTFTPSvr TFTP Server 1.0.1.200 Directory Traversal Vulnerability - Active Check

YaTFTPSvr TFTP Server is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

DEBIAN-CVE-2011-0542

fusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or umount, which allows local users to unmount arbitrary directories via unspecified vectors...