MinaliC WebServer 1.0 - Directory Traversal

MinaliC WebServer 1.0 - Directory Traversal ------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Directory Traversal Download................http://sourceforge.net/projects/minalic/ Release...

MinaliC WebServer 1.0 - Remote Source Disclosure / File Download

MinaliC Webserver 1.0 Remote Source Disclosure/File Download Found By: DrIDE Date: October 27, 2010 Download: http://sourceforge.net/projects/minalic/ Tested on: Windows 7 Greets: edb team & John Leitch for finding the app - Description - MinialiC Webserver v1.0 is a Windows based HTTP server. Th...

MinaliC WebServer 1.0 - Directory Traversal

------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Directory Traversal Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010 Tested On...............Windows XP...

W-Agora 4.1.5 - Local File Inclusion Cross-Site Scripting

W-Agora 4.1.5 - Local File Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/44507/info W-Agora is prone to multiple local file-include vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker c...

MinaliC WebServer 1.0 - Remote Source Disclosure File Download

MinaliC WebServer 1.0 - Remote Source Disclosure File Download MinaliC Webserver 1.0 Remote Source Disclosure/File Download Found By: DrIDE Date: October 27, 2010 Download: http://sourceforge.net/projects/minalic/ Tested on: Windows 7 Greets: edb team & John Leitch for finding the app - Descripti...

MinaliC WebServer 1.0 - Denial of Service

------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Denial Of Service Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010 Tested On...............Windows XP...

MinaliC WebServer 1.0 - Denial of Service

MinaliC WebServer 1.0 - Denial of Service ------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Denial Of Service Download................http://sourceforge.net/projects/minalic/ Release...

W-Agora 4.1.5 - Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/44507/info W-Agora is prone to multiple local file-include vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to view and execute local...

NitroView ESM - 'ess.pm' Remote Command Execution

source: https://www.securityfocus.com/bid/44421/info NitroView ESM is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied input. Successful attacks may allow an attacker to execute arbitrary commands on the appliance in the context of the...

NitroView ESM - ess.pm Remote Command Execution

NitroView ESM - ess.pm Remote Command Execution source: https://www.securityfocus.com/bid/44421/info NitroView ESM is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied input. Successful attacks may allow an attacker to execute arbitrary comman...

MinaliC Webserver 1.0 Directory Traversal

------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Directory Traversal Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010 Tested On...............Windows XP...

MinaliC Webserver 1.0 Denial Of Service

------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Denial Of Service Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010 Tested On...............Windows XP...

w-Agora 'search.php' Local File Include and Cross Site Scripting Vulnerabilities

w-Agora is prone to a local file-include vulnerability and a cross- site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...

W-Agora 4.2.1 - search.php?bn Cross-Site Scripting

W-Agora 4.2.1 - search.php?bn Cross-Site Scripting source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local...

W-Agora 4.2.1 - search.php3?bn Traversal Local File Inclusion

W-Agora 4.2.1 - search.php3?bn Traversal Local File Inclusion source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the...

W-Agora 4.2.1 - 'search.php?bn' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal...

W-Agora 4.2.1 - 'search.php3?bn' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/44370/info w-Agora is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal...

Multiple Vulnerabilities in JAF CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in JAF CMS which could be exploited to compromise vulnerable system. 1 Remote code execution in JAF CMS The vulnerability exists due to insufficient sanitation of input data in module/log/vislog.php. A remote attack...

PhreeBooks Multiple Remote Vulnerabilities

PhreeBooks is prone to multiple input-validation vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, or obtain potentially...

SA-CONTRIB-2010-100 - Ubuntu Drupal Theme - Directory traversal and information disclosure

This Ubuntu Drupal Theme - Brown is designed to mimic the old ubuntu.com. The theme used a PHP file to generate a gradient image on the fly. User input from the URL is not properly validated in this PHP code, leading to a directory traversal vulnerability where the contents of any file readable b...