CF_Nuke 4.6 - index.cfm Local File Inclusion

CFNuke 4.6 - index.cfm Local File Inclusion source: https://www.securityfocus.com/bid/15777/info CFNuke is prone to a local file include vulnerability. This is due to a lack of sanitization of user-supplied input. This may facilitate the unauthorized viewing of files and unauthorized execution of...

PHP Doc System 1.5.1 - Local File Inclusion

source: https://www.securityfocus.com/bid/15611/info PHP Doc System is prone to a local file-include vulnerability. This is due to the application's failure to properly sanitize user-supplied input. This may facilitate the unauthorized viewing of files and unauthorized execution of local PHP code...

CVE-2004-2550

Multiple cross-site scripting XSS vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject arbitrary web script or HTML, which is later executed by a target who views reports containing the injected data...

osTicket Attachment Viewing Vulnerability

The target is running at least one instance of osTicket that enables a remote user to view attachments associated with any existing ticket. These attachments may contain sensitive information. OpenVAS Vulnerability Test $Id: osticketviewattachments.nasl 6056 2017-05-02 09:02:50Z teissa $...

Total PC Solutions PHP Rocket Add-in for FrontPage File Traversal Vulnerability

There is a vulnerability in the Total PC Solutions PHP Rocket Add-in for FrontPage that allows a remote attacker to view the contents of any arbitrary file to which the web user has access. SPDX-FileCopyrightText: 2001 HD Moore & Drew Hintz Some text descriptions might be excerpted from a...

IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV

It is possible to remotely view the source code of web script files though a specially crafted WebDAV HTTP request. Only IIS 5.1 seems to be vulnerable. The web script file must be on a FAT or a FAT32 volume, web scripts located on NTFS volumes are not vulnerable. Confirmed vulnerable -Microsoft®...

cosmoshop81078.txt

author : l0om innate| @t | gmx.de WWW.EXCLUDED.ORG product: cosmoshop version: = 8.10.78 problem: 1. sql injection 2. cleartext passwords 3. view any file maunuf.: www.cosmoshop.de what is cosmoshop cosmoshop is a comercial shop system written as a CGI. where is the problem 1. sql injection...

CVE-2004-2445

CVE-2004-2445: Directory traversal in Jaws 0.3 BETA index.php via the gadget parameter allows remote attackers to view arbitrary files using dot-dot sequences. This is documented in multiple sources (NVD/CVE records and Nessus-like disclosures) and confirms a file-read vulnerability in the early ...

W-Nailer 0.34

случайно обнаружыл искал уязвимости на чужом сайте уязвимость в W-Nailer 0.34. Разработчик - http://wnailer.vddh.com/ Узвимость: в файле scripts/thumb.php не проверяется file, в итоге - возможность просмотра любых файлоф на сайте, при просмотре превьюшек типа шелла что-то Пример:...

CVE-2002-1745

Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files...

lpanelClient.txt

Subject: Lpanel.NET's Lpanel all versions up to and including 1.59 is vulnerable to the unauthorized viewing of client invoice information. Severity: High; This vulnerability allows an attacker unauthorized viewing of other clients' invoice information. Preamble: Taken from http://www.lpanel.net/...

CVE-2004-1887

Ada Image Server ImgSvr 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 null...

CVE-2003-1144

Buffer overflow in the log viewing interface in Perception LiteServe 1.25 through 2.2 allows remote attackers to execute arbitrary code via a GET request with a long file name...

еще один бажный скрипт в WebAPP v0.9.9.

Здравствуйте, . вот нашел еще новую узвимость в WebAPP v0.9.9.. Просмотр произвольных файлов в WebAPP Web Automated Perl Portal System v0.9.9. Software / Application - WebAPP v0.9.9. Problem-Type - удаленная Vulnerability - возможность чтения файлов и просмотр каталогов. Vendor -...

Brooky CubeCart < 2.0.7 Multiple Script SQL Injection

Binary data 2801.prm...

php-fusion 4.x vuln

TheGreatOne2176, Reapercore I have a found an error in php-fusion 4.x where you can view any thread on the forum. In fusionforum/viewthread.php the $GET variables arent properly checked or queried making it possible to view all threads. The example I tested was...

уязвимость в AlaCart Version 2.18

Обнаружена уязвимость в системе AlaCart Version 2.18 Software / Application - Alabanza AlaCart Shopping Cart Problem-Type - удаленная Vulnerability - просмотр информации о транзакциях. Vendor - alabanza.com Risk / Severity - низкий Exploit -...

Remote Web Server Text File Viewing Vulnerability in WebLibs 1.0

Advisory: ========= Remote Web Server Text File Viewing Vulnerability in WebLibs 1.0 Author: ======= John Bissell A.K.A. HighT1mes Vendor Homepage: ================ http://awsd.com/ Date: ===== 12, 07, 2004 Severity: ========= High Overview: ========= WebLibs is a pretty popular simple little Per...

CVE-2004-0280

Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" encoded space character, e.g. index.jsp%20...

GLSA-200408-09 : Roundup: Filesystem access vulnerability

The remote host is affected by the vulnerability described in GLSA-200408-09 Roundup: Filesystem access vulnerability Improper handling of a specially crafted URL allows access to the server's filesystem, which could contain sensitive information. Impact : An attacker could view files owned by th...