CVE-2009-1323

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1323

CVE-2009-1323 describes an SQL injection in Web File Explorer 3.1, where body.asp fails to sanitize the id parameter, allowing remote attackers to inject and execute arbitrary SQL commands. This is triggered via the id parameter in the request, enabling potential data disclosure or modification o...

Code injection

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

CVE-2009-1314

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

CVE-2009-1314

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

CVE-2009-1323: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1314

The CVE-2009-1314 entry concerns body.asp in Web File Explorer 3.1, where the savefile action accepts a file parameter containing an executable extension, enabling remote attackers to create arbitrary files and execute arbitrary code. Affected component: Web File Explorer 3.1’s web interface (bod...

CVE-2009-1314: Undefined Security Weakness

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2007-3049

CVE-2007-3049 : In Buttercup Web File Manager (BWFM), the vulnerability is an XSS in index.php via the title parameter. The root cause is lack of input sanitization on the title field, allowing remote attackers to inject arbitrary web script/HTML. According to the NVD entry, the impact is partial...

CVE-2007-3049

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2007-3049: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Buttercup web file manager BWFM May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

Buttercup WFM - 'Title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Excel Viewer OCX 3.1.0.6 Multiple Methods Denial of Service Exploit

No description provided by source. span style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bExcelViewer.ocx v. 3.1.0.6 multiple methods Denial of Service/b url: urlhttp://www.officeocx.com//url sell: from 63.95...

CVE-2004-2287

Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. dot dot in the wdir parameter...

CVE-2004-2287: Undefined Security Weakness

Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. dot dot in the wdir parameter...

CVE-2004-2287

Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. dot dot in the wdir parameter...

dsm light Web file browser 2.0 - Directory Traversal

dsm light Web file browser 2.0 - Directory Traversal source: https://www.securityfocus.com/bid/10381/info DSM Light has been reported to be prone to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue woul...

Computalynx CMail 2.3 - Web File Access

/ source: https://www.securityfocus.com/bid/281/info A vulnerability in Computalynx's CMail allows remote malicious users to steal local files. Compulynx's CMail is a Win32 mail server program. One of its features is allowing users to access their email with a web browser via a built-in web serve...