7586 matches found
simple file manager 0.24a - Multiple Vulnerabilities
/\ | flame vrs Simple File Manager | | http://onedotoh.sourceforge.net/ | | Various Vulnerbilities Including: | / /+++++++++++++++++++++++++++++++++++++++++++\ | Using the scripts supplied by the webapp: | | Reading of Arbitrary files | | Deletion of Arbitrary files | | Modification of Arbitrary...
aigaion-rfi.txt
Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...
Aigaion <= 1.2.1 (DIR) Remote File Include Vulnerabilities
No description provided by source. Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...
ContentNow Directory Traversal(upload.php)
Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...
Aigaion <= 1.2.1 (DIR) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== Aigaion = 1.2.1 DIR Remote File Include Vulnerabilities ========================================================== Software:Web based bibliography management system Download link:...
Aigaion 1.2.1 - DIR Remote File Inclusion
Aigaion 1.2.1 - DIR Remote File Inclusion Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...
Aigaion 1.2.1 - 'DIR' Remote File Inclusion
Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...
Microsoft Security Advisory (927892) Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution
Microsoft Security Advisory 927892 Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution Published: November 3, 2006 Microsoft is investigating public reports of a vulnerability in the XMLHTTP 4.0 ActiveX Control, part of Microsoft XML Core Services 4.0 on Windows. We are...
Mcafee SecurityCenter远程命令执行漏洞
McAfee SecurityCenter是集中的基于Web的管理控制台，提供了报告和配置控制。 McAfee SecurityCenter及其他用户产品中存在多个漏洞，允许攻击者在有漏洞的系统上执行任意命令，导致完全入侵系统。 漏洞的利用需要用户被诱骗访问恶意网页或在收到邮件时执行某些形式的交互操作。 McAfee SecurityCenter 6.0.22 McAfee SecurityCenter 6.0 McAfee SecurityCenter 4.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Symantec On-Demand Protection加密数据信息泄露漏洞
Symantec On-Demand Agent（SODA）和Symantec On-Demand Protection（SODP）可为基于WEB的应用和服务提供虚拟桌面环境。 本地攻击者可以解密Symantec On-Demand虚拟桌面环境所加密的文件，访问文件中的数据。攻击的具体影响取决于所加密文件的内容。 Symantec SODP 2.6 build 2232 Symantec SODA 2.5 MR2 build 2156 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://support.sygate.com/...
CVE-2006-5639
OpenWBEM 3.2.0 has an unspecified vulnerability in its random number generator that can enable privilege escalation via local or HTTP Digest authentication. Affected component: RNG in OpenWBEM. Impact aligns with CVSS base: HIGH (AV:N/AC:L/Au:N/C:P/I:P/A:P). No exploitation details or patch infor...
Directory listing on B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD"
·= Security Advisory =· Issue: B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD" Discovered Date: 02/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.inoviatele.com/ Details: B-FOCuS Wireless Router is prone to a directory listing...
ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure
source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to authenticate users before providing access to sensitive information. Exploiting thi...
ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure
ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to...
Gallery main.php远程目录遍历漏洞
Gallery是基于Web的开放源码相册管理器。 Gallery中存在目录遍历漏洞，攻击者可以通过特制的url无需登录便访问服务器中webserver可访问的任意文件，导致泄漏敏感信息。 Gallery Gallery 2.0-Beta3 厂商补丁： Gallery ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： Gallery Upgrade gallery-2.0.1-typical.tar.gz http://prdownloads.sourceforge.net/gallery/gallery-2.0.1-typical.tar.gz...
Horde Ingo Software Detection
The remote host is running Ingo, a PHP-based application from the Horde Project for managing email filter rules. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22899; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...
PHPMyManga 0.8.1 - 'template.php' Multiple File Inclusions
+------------------------------------------------------------------------------------------- + PhpMyManga +------------------------------------------------------------------------------------------- + Details: + Input passed to the 'actionsPage' or 'formPage' parameter in template.php is not...
Debian DSA-980-1 : tutos - several vulnerabilities
Joxean Koret discovered several security problems in tutos, a web-based team organization software. The Common Vulnerabilities and Exposures Project identifies the following problems : - CVE-2004-2161 A SQL injection vulnerability allows the execution of SQL commands through the linkid parameter ...
Debian DSA-944-1 : mantis - several vulnerabilities
Several security related problems have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4238 Missing input sanitising allows remote attackers to inject arbitrary web script or HTML. -...
Debian DSA-1052-1 : cgiirc - buffer overflows
Several buffer overflows have been discovered in cgiirc, a web-based IRC client, which could be exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1052. T...