WordPress Zingiri 2.2.3 Code Execution

get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45. $selectedDocuments$key = $POST'value'; 46. $sessionAction-set$selectedDocuments; 47. 48. 49. echo...

hbase-master-info NSE Script

Retrieves information from an Apache HBase Hadoop database master HTTP status page. Information gathered: Hbase version Hbase compile date Hbase root directory Hadoop version Hadoop compile date Average load Zookeeper quorum server Associated region servers Script Arguments slaxml.debug See the...

Calibre E-Book Reader - Local Privilege Escalation (1)

!/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi and look at the array of silly things done, only one ...

YaTFTPSvr TFTP Server 1.0.1.200 Directory Traversal Vulnerability - Active Check

YaTFTPSvr TFTP Server is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

DEBIAN-CVE-2011-0542

fusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or umount, which allows local users to unmount arbitrary directories via unspecified vectors...

PHP 5.3.6 - Security Bypass

PHP 5.3.6 - Security Bypass source: https://www.securityfocus.com/bid/48259/info PHP is prone to a security-bypass vulnerability. Successful exploits will allow an attacker to create arbitrary files from the root directory, which may aid in further attacks. PHP 5.3.6 is vulnerable; other versions...

PHP 5.3.6 - Security Bypass

source: https://www.securityfocus.com/bid/48259/info PHP is prone to a security-bypass vulnerability. Successful exploits will allow an attacker to create arbitrary files from the root directory, which may aid in further attacks. PHP 5.3.6 is vulnerable; other versions may also be affected. HTTP...

Path disclousure in MEGA PORTAL

Product: MEGA PORTAL Vendor: http://www.got.my Demo: http://www.got.my/MEGA-PORTAL/ Vulnerability Type: Path disclosure Risk level: medium Credit: Hector.x90 Vulnerability Details: A remote user can determine the full path to the web root directory and other potentially sensitive information. The...

HTB22948: Path disclosure in Cotonti

Vulnerability ID: HTB22948 Reference: http://www.htbridge.ch/advisory/pathdisclosureincotonti.html Product: Cotonti Vendor: Cotonti Team http://www.cotonti.com/ Vulnerable Version: Siena 0.9.0 Vendor Notification: 12 April 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech...

HTB22954: Path disclousure in yappa-ng Photo Gallery

Vulnerability ID: HTB22954 Reference: http://www.htbridge.ch/advisory/pathdisclousureinyappangphotogallery.html Product: yappa-ng Photo Gallery Vendor: http://www.zirkon.at/ http://www.zirkon.at/ Vulnerable Version: 2.3.2 Vendor Notification: 12 April 2011 Vulnerability Type: Path disclousure Ris...

HTB22944: Path disclousure in ZENphoto

Vulnerability ID: HTB22944 Reference: http://www.htbridge.ch/advisory/pathdisclousureinzenphoto.html Product: ZENphoto Vendor: Zenphoto http://www.zenphoto.org/ Vulnerable Version: 1.4.0.3 Vendor Notification: 07 April 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech...

Universal Post Manager WordPress Plugin 1.0.9 XSS / Path Disclosure

============================== Vulnerability ID: HTB22937 Reference: http://www.htbridge.ch/advisory/pathdisclosureinuniversalpostmanagerwordpressplugin.html Product: Universal Post Manager wordpress plugin Vendor: ProfProjects Artyom Chakhoyan http://www.profprojects.com/ Vulnerable Version: 1.0...

HTB22937: Path disclosure in Universal Post Manager wordpress plugin

Vulnerability ID: HTB22937 Reference: http://www.htbridge.ch/advisory/pathdisclosureinuniversalpostmanagerwordpressplugin.html Product: Universal Post Manager wordpress plugin Vendor: ProfProjects Artyom Chakhoyan http://www.profprojects.com/ Vulnerable Version: 1.0.9 Vendor Notification: 05 Apri...

HTB22929: Multiple Path disclosure in WebsiteBaker

Vulnerability ID: HTB22929 Reference: http://www.htbridge.ch/advisory/multiplepathdisclosureinwebsitebaker.html Product: WebsiteBaker Vendor: Website Baker Org http://www.websitebaker2.org/ Vulnerable Version: 2.8.1 Vendor Notification: 29 March 2011 Vulnerability Type: Path disclosure Risk level...

PHPCMS 2 0 0 8 SP2 latest local file inclusion vulnerability-vulnerability warning-the black bar safety net

PHPCMS into the hardest hit. A vulnerability would allow people to storm out. 0day also often have. Nonsense not much said. Directly on the method. Take the shell method: Contains:admin/safe. inc. php file GET submitted data Will be generated under the root directory a word Encrypt the following...

WebsiteBaker 2.8.1 Path Disclosure / SQL Injection

=================================== Vulnerability ID: HTB22929 Reference: http://www.htbridge.ch/advisory/multiplepathdisclosureinwebsitebaker.html Product: WebsiteBaker Vendor: Website Baker Org http://www.websitebaker2.org/ Vulnerable Version: 2.8.1 Vendor Notification: 29 March 2011...

HTB22918: Path disclosure in phpCollab

Vulnerability ID: HTB22918 Reference: http://www.htbridge.ch/advisory/pathdisclosureinphpcollab.html Product: phpCollab Vendor: phpCollab Team http://www.php-collab.org/ Vulnerable Version: 2.5 and probably prior versions Vendor Notification: 24 March 2011 Vulnerability Type: Path disclosure Risk...

Multiple Vulnerabilities in ZENphoto

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in ZENphoto which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in ZENphoto The vulnerability exists due to input sanitati...

HTB22909: Path disclosure in Tine 2.0

Vulnerability ID: HTB22909 Reference: http://www.htbridge.ch/advisory/pathdisclosureintine20.html Product: Tine 2.0 Vendor: Metaways Infosystems GmbH http://www.tine20.org/ Vulnerable Version: Neele 2011-01-2 Vendor Notification: 17 March 2011 Vulnerability Type: Path disclosure Status: Fixed by...

HTB22904: Path disclosure in bbPress

Vulnerability ID: HTB22904 Reference: http://www.htbridge.ch/advisory/pathdisclosureinbbpress.html Product: bbPress Vendor: http://bbpress.org http://bbpress.org Vulnerable Version: 1.0.3 Vendor Notification: 15 March 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech Brid...