3879 matches found
WebEx Downloader Plug-in Multiple Vulnerabilities + rant
All these vulnerabilities were reported to WebEx by NGS Software back on the 24th February 2005 along with some other issues. The current Director of the X-Force new about these issues as at the time of their discovery, he worked with NGS. Seeing as I'm the subject, here is another example whereb...
RW::Download - 'stats.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/18901/info RW::Download is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the...
[SA20976] Gimp XCF Parsing Buffer Overflow Vulnerability
---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...
[ECHO_ADV_36$2006] ExtCalendar <== v2.0 Remote File Include Vulnerabilities
ECHO.OR.ID ECHOADV36$2006 --------------------------------------------------------------------------- ECHOADV36$2006 ExtCalendar == v2.0 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Ahmad Maulana a.k.a Matdhule Date : Jul...
Extcalendar 2.0 - Extcalendar.php Remote File Inclusion
Extcalendar 2.0 - Extcalendar.php Remote File Inclusion source: https://www.securityfocus.com/bid/18876/info ExtCalendar is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue ...
[SA19456] jetAudio ID Tag "tooltip" Buffer Overflow Vulnerability
---------------------------------------------------------------------- Reverse Engineer Wanted Secunia offers a Security Specialist position with emphasis on reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerability reports...
Pearl Products Multiple Remote File Inclusion
Pearl Products Multiple Remote File Inclusion Discovered By zero Moroccan Security Team Affected softwares: Pearl Forums 2.4 Ngoc Biec 1.4 Pearl For Biz 2.4 Pearl For Mambo 1.6 URL : http://sourceforge.net/projects/pearlforums/ Risk : High Impact: System access ------ PoC...
Glossaire 1.7 - Remote File Inclusion
Glossaire 1.7 - Remote File Inclusion source: https://www.securityfocus.com/bid/18792/info Glossaire is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary...
Glossaire 1.7 - Remote File Inclusion
source: https://www.securityfocus.com/bid/18792/info Glossaire is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP...
Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities
====================================================================== Secunia Research 14/06/2006 - DeluxeBB SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...
adv33-K-159-2006.txt
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV33$2006 --------------------------------------------------------------------------- ECHOADV33$2006 CMS Faethon 1.3.2 mainpath Remote File Inclusion...
[SA20749] MiMMS Media Stream Handling Buffer Overflow Vulnerabilities
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
secunia-deluxebb.txt
====================================================================== Secunia Research 14/06/2006 - DeluxeBB SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...
CMS Faethon 1.3.2 - mainpath Remote File Inclusion
CMS Faethon 1.3.2 - mainpath Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV33$2006 --------------------------------------------------------------------------- ECHOADV33$2006 CMS Faethon 1.3.2 mainpath Remote File Inclusion...
CMS Faethon <= 1.3.2 (mainpath) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== CMS Faethon = 1.3.2 mainpath Remote File Inclusion Vulnerability =================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \...
CMS Faethon 1.3.2 - 'mainpath' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV33$2006 --------------------------------------------------------------------------- ECHOADV33$2006 CMS Faethon 1.3.2 mainpath Remote File Inclusion...
Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities
====================================================================== Secunia Research 14/06/2006 - DeluxeBB SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...
Secunia Research: PicoZip "zipinfo.dll" Multiple Archives Buffer Overflow
====================================================================== Secunia Research 14/06/2006 - PicoZip "zipinfo.dll" Multiple Archives Buffer Overflow - ====================================================================== Table of Contents Affected...
Secunia Research: MyBB "domecode()" PHP Code Execution Vulnerability
====================================================================== Secunia Research 12/06/2006 - MyBB "domecode" PHP Code Execution Vulnerability - ====================================================================== Table of Contents Affected...
mafiamoblog.txt
Produce : Mafia Moblog WebSite :http://mafia.pearlabs.org Version : 6 Full and Prior Discovred By :Moroccan Security Research Team Simo64 IMPACT : Manipulation of data, System access + Full Path Disclosure : The problem is that it is possible to disclose the full path to 'big.php','upgrade.php' b...