Webby webserver SEH control (0day) PoC

Exploit for windows platform in category dos / poc ====================================== Webby webserver SEH control 0day PoC ====================================== !/usr/bin/python POC details: SEH overwritten contact: email protected http://www.s3cur1ty.de App detail:...

Snipe Gallery 3.1 - 'gallery.php?cfg_admin_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/40279/info Snipe Gallery is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute...

Snipe Gallery 3.1 - 'image.php?cfg_admin_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/40279/info Snipe Gallery is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute...

Snipe Gallery 3.1 - image.php?cfg_admin_path Remote File Inclusion

Snipe Gallery 3.1 - image.php?cfgadminpath Remote File Inclusion source: https://www.securityfocus.com/bid/40279/info Snipe Gallery is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include a...

Snipe Gallery 3.1 - gallery.php?cfg_admin_path Remote File Inclusion

Snipe Gallery 3.1 - gallery.php?cfgadminpath Remote File Inclusion source: https://www.securityfocus.com/bid/40279/info Snipe Gallery is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include...

Joomla! Component Percha Multicategory Article 0.6 - Controller Arbitrary File Access

Joomla! Component Percha Multicategory Article 0.6 - Controller Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An...

Joomla! Component Percha Downloads Attach 1.1 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Joomla! Component Percha Gallery 1.6 Beta - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Joomla! Component Percha Fields Attach 1.0 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Joomla! Component Percha Image Attach 1.1 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Joomla! Component Percha Downloads Attach 1.1 - Controller Traversal Arbitrary File Access

Joomla! Component Percha Downloads Attach 1.1 - Controller Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input...

Joomla! Component Percha Fields Attach 1.0 - Controller Traversal Arbitrary File Access

Joomla! Component Percha Fields Attach 1.0 - Controller Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. A...

Joomla! Component Percha Gallery 1.6 Beta - Controller Traversal Arbitrary File Access

Joomla! Component Percha Gallery 1.6 Beta - Controller Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An...

phpGroupWare Multiple Vulnerabilities

phpGroupWare is prone to multiple SQL-injection vulnerabilities and to a Local File Include Vulnerability because it fails to sufficiently sanitize user-supplied data before using it. Exploiting these issues could allow an attacker to compromise the application, access or modify data, exploit...

Fedora Update for mod_auth_shadow FEDORA-2010-6359

Check for the Version of modauthshadow OpenVAS Vulnerability Test Fedora Update for modauthshadow FEDORA-2010-6359 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Miniwebsvr 0.0.10 Directory Traversal

miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of the application available...

[SECURITY] Fedora 12 Update: mod_auth_shadow-2.2-8.fc12

When performing this task one encounters one fundamental difficulty: The /etc/shadow file is supposed to be read/writeable only by root. However, the webserver is supposed to run under a non-root user, such as "nobody". modauthshadow addresses this difficulty by opening a pipe to an suid root...

[SECURITY] Fedora 11 Update: mod_auth_shadow-2.2-8.fc11

When performing this task one encounters one fundamental difficulty: The /etc/shadow file is supposed to be read/writeable only by root. However, the webserver is supposed to run under a non-root user, such as "nobody". modauthshadow addresses this difficulty by opening a pipe to an suid root...

Mereo Directory Traversal Vulnerability

Mereo is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files and directories within the context of the webserver. Information harvested may aid in launching further...

ZDI-10-084: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Vulnerability

ZDI-10-084: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-084 May 11, 2010 -- CVE ID: CVE-2010-1553 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Network Node Manager -...