TGS CMS 0.x (XSS/SQL/FD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== TGS CMS 0.x XSS/SQL/FD Multiple Remote Vulnerabilities ======================================================== TGS CMS Cross Site Scripting,SQL injection,Blind SQL/XPath...

Vopak Local File Inclusion

============================================================== ===================¦¦¦¦TeamQuarantine¦¦¦¦=================== =====================¦¦¦¦ 7-15-2009 ¦¦¦¦==================== ============¦¦¦¦[email protected]¦¦¦¦============= ===============¦¦¦¦ Author: St00pidMnky...

Sun Java System Web Server ::$DATA Extension Request JSP Resource Disclosure

The remote Sun Java System Web Server or an older version, such as Sun ONE Web Server or iPlanet reveals the source code of '.jsp' files when an attacker appends '::$DATA' to the request. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid39618; scriptversion"1.10";...

Sun One WebServer source code disclosure

It's possible to obtains page source code via alternate NTFS streams http://server/hello.jsp::$DATA...

CVE-2009-2301

The radware AppWall Web Application Firewall WAF 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to 1 funcs.inc, 2 defines.inc, or 3 msg.inc in Management/...

elvin bts 1.2.0 - Multiple Vulnerabilities

elvin bts 1.2.0 - Multiple Vulnerabilities + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injecti...

Elvin BTS 1.2.0 Multiple Remote Vulnerabilities

No description provided by source. + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injection 2 Loc...

Elvin BTS 1.2.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== Elvin BTS 1.2.0 Multiple Remote Vulnerabilities =============================================== + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod - Script Homepage :...

elvin bts 1.2.0 - Multiple Vulnerabilities

Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injection 2 Local File Inclusion 3 SQL Injection...

Elvin BTS 1.2.0 XSS / LFI / SQL Injection

Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injection 2 Local File Inclusion 3 SQL Injection...

Lighttpd < 1.4.23 Source Code Disclosure Vulnerability (BSD/Solaris bug)

No description provided by source. Severe vulnerability due to a bug in FreeBSD, OS X and Solaris 10 filesystems affecting Lighttpd 1.4.23 A bug was discovered in the way FreeBSD, OS X and Solaris prior version 10 handle symlinks appended with a slash /. Accessing a regular file through a symboli...

Lighttpd < 1.4.23 (BSD/Solaris) - Source Code Disclosure

Severe vulnerability due to a bug in FreeBSD, OS X and Solaris 10 filesystems affecting Lighttpd 1.4.23 A bug was discovered in the way FreeBSD, OS X and Solaris prior version 10 handle symlinks appended with a slash /. Accessing a regular file through a symbolic link with appended slash succeeds...

Lighttpd 1.4.23 (BSDSolaris) - Source Code Disclosure

Lighttpd 1.4.23 BSDSolaris - Source Code Disclosure Severe vulnerability due to a bug in FreeBSD, OS X and Solaris 10 filesystems affecting Lighttpd 1.4.23 A bug was discovered in the way FreeBSD, OS X and Solaris prior version 10 handle symlinks appended with a slash /. Accessing a regular file...

Lighttpd 1.4.23 Source Code Disclosure Vulnerability (FreeBSD/OSX bug)

Exploit for multiple platform in category remote exploits ====================================================================== Lighttpd 1.4.23 Source Code Disclosure Vulnerability FreeBSD/OSX bug ====================================================================== Severe vulnerability in...

NaviCOPA Web Server远程堆溢出和源码泄露漏洞

BUGTRAQ ID: 33585 NaviCOPA Web Server是一款安装在Windows系统上的Web服务器，可以自动配置HTTP访问。 如果远程攻击者向NaviCOPA Web Server提交了超长的HTTP GET请求的话，就可以触发堆溢出，导致执行任意代码；此外向服务器提交包含有圆点字符的特制HTTP请求还可以泄露PHP脚本的源码。 InterVations NaviCOPA Web Server 3.01 厂商补丁： InterVations ------------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

NaviCOPA Trailing Dot Source Code Disclosure

The version of the NaviCOPA web server software running on the remote host returns the source of scripts hosted on it if the URL ends in a dot '.'. A remote attacker can leverage this issue to view the source code of CGIs and possibly obtain passwords and other sensitive information from this hos...

SuSE Update for mono-web SUSE-SA:2007:002

Check for the Version of mono-web OpenVAS Vulnerability Test $Id: gbsuse2007002.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for mono-web SUSE-SA:2007:002 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

FreeLyrics 1.0 (source.php p) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== FreeLyrics 1.0 source.php p Remote File Disclosure Vulnerability ================================================================== FreeLyrics Remote Source Code Disclosure...

FreeLyrics 1.0 - Remote File Disclosure

FreeLyrics 1.0 - Remote File Disclosure Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...

A simple php source code disclosure vulnerability excavations-vulnerability warning-the black bar safety net

We know that in asp appears to be the most or thesql injection, but in php since magicquotesgpc is on case special characters will be escaped, so even if there are a lot of times theresql injectionalso I can not use. But php powerful file operation function, but so that we can experience in asp c...