Linux Security Auditing Tool不安全临时文件建立漏洞

Linux Security Auditing Tool是一款安全审核工具。 Linux Security Auditing Tool不安全建立临时文件，本地攻击者可以利用漏洞覆盖敏感文件，造成拒绝服务攻击。 攻击者可以利用符号链接进行攻击。目前没有详细漏洞细节提供。 Linux Security Auditing Tool 0.9.2 Gentoo Linux 目前没有解决方案提供： http://usat.sourceforge.net/...

AssetMan 2.4a - download_pdf.php Remote File Disclosure

AssetMan 2.4a - downloadpdf.php Remote File Disclosure +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= | |AssetMan 2.4a = downloadpdf.php Remote File Disclosure Vulnerability | |Script: AssetMan | |Verson: 2.4a | |URL: http://www.bctree.com/assetman/assetman-2.4a.zip | |Discover: BorN To...

nabopoll 1.2 - Remote Unprotected Admin Section

nabopoll 1.2 - Remote Unprotected Admin Section nabopoll 1.1.2 sensitive file admin without password By : sn0oPy Risk : high site : http://nabocorp.com/ Dork : inurl:"nabopoll/" exploit : acces without password to : http://target/nabopoll/admin/configedit.php...

phpPolls 1.0.3 (acces to sensitive file)

phpPolls 1.0.3 acces to sensitive file By : sn0oPy Risk : medium exploit : Replace http://www.target.ma/phpPolls/index.php3 by http://www.target.ma/phpPolls/phpPollAdmin.php3 dork : inurl:"phpPolls/" contact : [email protected] Site : http://forums.avenir-geopolitique.net greetz :...

nabopoll 1.1.2 sensitive file (admin without password)

nabopoll 1.1.2 sensitive file admin without password By : sn0oPy Risk : high site : http://nabocorp.com/ Dork : inurl:"nabopoll/" exploit : acces without password to : http://target/nabopoll/admin/configedit.php http://target/nabopoll/admin/templateedit.php...

phpquiz.txt

phpQuiz sensitive file install.php without authentification + Files containing interesting info passwords for sql db By : sn0oPy Risk : verry high Site : http://phpquiz.com/ Dork : intitle:"phpQuiz" | " Développé par PhpQuiz v.1.0 " | "© PhpQuiz" | inurl:"PhpQuiz" exploit :...

PT-2005-2673 · Postnuke · Postnuke

Name of the Vulnerable Software and Affected Versions: PostNuke versions 0.750 through 0.760RC3 Description: The issue allows remote attackers to obtain sensitive information via direct requests to various files, including theme.php and Xanthia.php in the Xanthia module, multiple files in the...

remote command execution in ad.cgi script

Tunis 24/04/2005 BUG found by fireboy [email protected] THERE ARE SOME BUGS IN ad.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM OR EXECUTE COMMANDS IN THE TARGET HOST WICH CAN COMPROMISE IT. IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 1file showing...

CVE-2004-1030

fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message...

escripts software e_board 4.0 - Directory Traversal

escripts software eboard 4.0 - Directory Traversal source: https://www.securityfocus.com/bid/12048/info It is reported that eBoard is vulnerable to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input. By including '../'...

sugarsales 1.x2.0 - Multiple Vulnerabilities

sugarsales 1.x2.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/11896/info Multiple remote vulnerabilities are reported to exist in SugarSales. The first reported issue is an SQL injection vulnerability. This vulnerability is due to a lack of proper input-validation by the...

pntresmailer 6.0 - Directory Traversal

pntresmailer 6.0 - Directory Traversal source: https://www.securityfocus.com/bid/11767/info pnTresMailer is reported susceptible to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input data. This vulnerability can be...

Xedus Web Server 1.0 - Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/11071/info It is reported that Xedus is susceptible to multiple vulnerabilities. The first reported issue is a denial of service vulnerability. The affected application is unable to service multiple simultaneous connections, denying access to the hosted...

Keene Digital Media Server 1.0.2 - Directory Traversal

Keene Digital Media Server 1.0.2 - Directory Traversal source: https://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using he...

Keene Digital Media Server 1.0.2 - Directory Traversal

source: https://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using hex encoded directory traversal character sequences to...

Web-APP.Org WebAPP 0.80.9.x - Directory Traversal

Web-APP.Org WebAPP 0.80.9.x - Directory Traversal source: https://www.securityfocus.com/bid/11028/info WebAPP is reported prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input data. An attacker can exploit this vulnerability to retriev...

AWStats Input Validation Hole in 'logfile'

No description provided by source. Example: http://target/awstats.pl?filterrawlog=&rawlogmaxlines=5000&config=stats.jdims.info&framename=main&pluginmode=rawlog&log file=/etc/passwd...

Opera < 7.23 File Download Encoded Traversal Arbitrary File Deletion

The version of Opera installed on the remote host contains a file corruption vulnerability. This issue is exposed when a user is presented with a file dialog, which will cause the creation of a temporary file. It is possible to specify a relative path to another file on the system using directory...

Acme thttpd 2.0.7 - Directory Traversal

Acme thttpd 2.0.7 - Directory Traversal source: https://www.securityfocus.com/bid/10862/info It is reported that thttpd is susceptible to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue only exists in the Windows...

Acme thttpd 2.0.7 - Directory Traversal

source: https://www.securityfocus.com/bid/10862/info It is reported that thttpd is susceptible to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue only exists in the Windows port of the application, as it does not...