Webby WebServer - Overflow (SEH) (PoC)

Webby WebServer - Overflow SEH PoC !/usr/bin/python POC details: SEH overwritten contact: [email protected] http://www.s3cur1ty.de App detail: http://www.shareware.de/webby-webserver/ Version 1.01 Autor Timo Gaik Lizenzart Freeware Plattformen Win XP, Win 98, Win ME Letztes Update 19.10.2004...

Webby WebServer - Overflow (SEH) (PoC)

!/usr/bin/python POC details: SEH overwritten contact: [email protected] http://www.s3cur1ty.de App detail: http://www.shareware.de/webby-webserver/ Version 1.01 Autor Timo Gaik Lizenzart Freeware Plattformen Win XP, Win 98, Win ME Letztes Update 19.10.2004 Dateigroesse 701 KB import socket import sys...

Snipe Gallery 3.1 - image.php?cfg_admin_path Remote File Inclusion

Snipe Gallery 3.1 - image.php?cfgadminpath Remote File Inclusion source: https://www.securityfocus.com/bid/40279/info Snipe Gallery is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include a...

Snipe Gallery 3.1 - gallery.php?cfg_admin_path Remote File Inclusion

Snipe Gallery 3.1 - gallery.php?cfgadminpath Remote File Inclusion source: https://www.securityfocus.com/bid/40279/info Snipe Gallery is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include...

Snipe Gallery 3.1 - 'image.php?cfg_admin_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/40279/info Snipe Gallery is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute...

Snipe Gallery 3.1 - 'gallery.php?cfg_admin_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/40279/info Snipe Gallery is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute...

Joomla! Component Percha Multicategory Article 0.6 - Controller Arbitrary File Access

Joomla! Component Percha Multicategory Article 0.6 - Controller Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An...

Joomla! Component Percha Downloads Attach 1.1 - Controller Traversal Arbitrary File Access

Joomla! Component Percha Downloads Attach 1.1 - Controller Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input...

Joomla! Component Percha Gallery 1.6 Beta - Controller Traversal Arbitrary File Access

Joomla! Component Percha Gallery 1.6 Beta - Controller Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An...

Joomla! Component Percha Fields Attach 1.0 - Controller Traversal Arbitrary File Access

Joomla! Component Percha Fields Attach 1.0 - Controller Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. A...

Joomla! Component Percha Image Attach 1.1 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Joomla! Component Percha Gallery 1.6 Beta - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Joomla! Component Percha Downloads Attach 1.1 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Joomla! Component Percha Fields Attach 1.0 - 'Controller' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/40244/info Multiple Percha components for Joomla are prone to multiple local file-include vulnerabilities because they fail to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information...

Fedora Update for mod_auth_shadow FEDORA-2010-6359

Check for the Version of modauthshadow OpenVAS Vulnerability Test Fedora Update for modauthshadow FEDORA-2010-6359 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

phpGroupWare Multiple Vulnerabilities

phpGroupWare is prone to multiple SQL-injection vulnerabilities and to a Local File Include Vulnerability because it fails to sufficiently sanitize user-supplied data before using it. Exploiting these issues could allow an attacker to compromise the application, access or modify data, exploit...

Miniwebsvr 0.0.10 Directory Traversal

miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of the application available...

[SECURITY] Fedora 12 Update: mod_auth_shadow-2.2-8.fc12

When performing this task one encounters one fundamental difficulty: The /etc/shadow file is supposed to be read/writeable only by root. However, the webserver is supposed to run under a non-root user, such as "nobody". modauthshadow addresses this difficulty by opening a pipe to an suid root...

[SECURITY] Fedora 11 Update: mod_auth_shadow-2.2-8.fc11

When performing this task one encounters one fundamental difficulty: The /etc/shadow file is supposed to be read/writeable only by root. However, the webserver is supposed to run under a non-root user, such as "nobody". modauthshadow addresses this difficulty by opening a pipe to an suid root...

Mereo Directory Traversal Vulnerability

Mereo is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files and directories within the context of the webserver. Information harvested may aid in launching further...