Weborf HTTP 'modURL()' Function Directory Traversal Vulnerability

Weborf is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks. Weborf...

Weborf Directory Traversal Vulnerability (Sep 2010)

Weborf is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HeffnerCMS 1.22 - index.php Local File Inclusion

HeffnerCMS 1.22 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/43006/info HeffnerCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

SyndeoCMS Local File Include, Cross Site Scripting, and HTML Injection Vulnerabilities

SyndeoCMS is prone to a local file-include, a cross-site scripting, and an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Exploiting the local file-include issue allows remote attackers to view or execute local files within the context of the...

HeffnerCMS 1.22 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/43006/info HeffnerCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts i...

TBDev 2.0 - Remote File Inclusion SQL Injection

TBDev 2.0 - Remote File Inclusion SQL Injection source: https://www.securityfocus.com/bid/43004/info TBDev is prone to multiple input-validation vulnerabilities, including a remote file-include issue and an SQL-injection issue. A successful exploit may allow an attacker to execute malicious code...

TBDev 2.0 - Remote File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/43004/info TBDev is prone to multiple input-validation vulnerabilities, including a remote file-include issue and an SQL-injection issue. A successful exploit may allow an attacker to execute malicious code within the context of the webserver process,...

CMS Made Simple 'modules/Printing/output.php' Local File Include Vulnerability

This host is running CMS Made Simple and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodcmsmadesimplelfivuln.nasl 5394 2017-02-22 09:22:42Z teissa $ CMS Made Simple 'modules/Printing/output.php' Local File Include Vulnerability Authors: Sooraj KS Copyright:...

TCMS - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/42766/info TCMS is prone to multiple input-validation vulnerabilities, including a local file-include vulnerability, a local file-disclosure vulnerability, multiple SQL-injection vulnerabilities, and multiple cross-site scripting vulnerabilities. An...

CMS Source - Multiple Input Validation Vulnerabilities

CMS Source - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/42437/info CMS Source is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file-include, SQL-injection...

Computer Associates Oneview Monitor 6.0 - doSave.jsp Remote Code Execution

Computer Associates Oneview Monitor 6.0 - doSave.jsp Remote Code Execution source: https://www.securityfocus.com/bid/42413/info Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input...

Apache-Mod-JK

Stack-based buffer overflow in the mapuritoworker function native/common/jkuriworkermap.c in modjk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that triggers the overflow in a...

Computer Associates Oneview Monitor 6.0 - 'doSave.jsp' Remote Code Execution

source: https://www.securityfocus.com/bid/42413/info Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to inject and execute arbitrary JSP...

Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption (MS10-051)

Exploit for windows platform in category dos / poc ================================================================= Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption MS10-051 ================================================================= Sources:...

D-Link WBR-2310 1.0.4 - GET Remote Buffer Overflow (PoC)

D-Link WBR-2310 1.0.4 - GET Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/42153/info D-Link WBR-2310 is prone to a remote buffer-overflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. This...

Whizzy CMS 'whizzycms1001.php' Local File Include Vulnerability

Whizzy CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This may allo...

D-Link WBR-2310 1.0.4 - 'GET' Remote Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/42153/info D-Link WBR-2310 is prone to a remote buffer-overflow vulnerability because it fails to bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. This issue occurs in the device's webserver. Exploiting this...

nuBuilder <= 10.04.20 RFI Vulnerability

nuBuilder is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Social Media - index.php Local File Inclusion

Social Media - index.php Local File Inclusion source: https://www.securityfocus.com/bid/42009/info Social Media is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

Social Media - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/42009/info Social Media is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in...