Chimaera Project Aterr 0.9.1 - Multiple Local File Include Vulnerabilities

Chimaera Project Aterr 0.9.1 Multiple Local File Include Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28861/info Aterr is prone to local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit...

Wikepage Opus 13 2007.2 - index.php Multiple Directory Traversal Vulnerabilities

Wikepage Opus 13 2007.2 - index.php Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/28664/info Wikepage Opus is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...

DSA-1540-1 lighttpd

Bulletin has no description...

Wikepage Opus 13 2007.2 - 'index.php' Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/28664/info Wikepage Opus is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues using directory-traversal strings '../' to download arbitrar...

Terracotta - index.php Local File Inclusion

Terracotta - index.php Local File Inclusion source: https://www.securityfocus.com/bid/28550/info Terracotta is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to vie...

Terracotta - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/28550/info Terracotta is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view local files in the context of the webserve...

PHPGKit 0.9 - connexion.php Remote File Inclusion

PHPGKit 0.9 - connexion.php Remote File Inclusion source: https://www.securityfocus.com/bid/28526/info PhpGKit is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute malicious PHP code in the context...

PHPGKit 0.9 - 'connexion.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28526/info PhpGKit is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allow the...

Simple Machines Forum (SMF) 1.1.4 - Multiple Remote File Inclusions

Simple Machines Forum SMF 1.1.4 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/28493/info Simple Machines Forum is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit the...

Simple Machines Forum (SMF) 1.1.4 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/28493/info Simple Machines Forum is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious P...

JAF CMS 4.0.0 RC2 - website main_dir Multiple Remote File Inclusions

JAF CMS 4.0.0 RC2 - website maindir Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/28476/info JAF CMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to...

JAF CMS 4.0.0 RC2 - 'website' / 'main_dir' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/28476/info JAF CMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

phpBB PJIRC Module 0.5 - irc.php Local File Inclusion

phpBB PJIRC Module 0.5 - irc.php Local File Inclusion source: https://www.securityfocus.com/bid/28446/info The PJIRC module for phpBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using...

phpBB PJIRC Module 0.5 - 'irc.php' Local File Inclusion

source: https://www.securityfocus.com/bid/28446/info The PJIRC module for phpBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view files and execute local...

Le Forum - Fichier_Acceuil Remote File Inclusion

Le Forum - FichierAcceuil Remote File Inclusion source: https://www.securityfocus.com/bid/28423/info Le Forum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute malicious PHP code in the context ...

Le Forum - 'Fichier_Acceuil' Remote File Inclusion

source: https://www.securityfocus.com/bid/28423/info Le Forum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allow the...

hacking the mitsubishi GB-50A

Hi All, Well, it's been over 4 months since my plea for a security contact at Mitsubishi Electric to come forward. Since no one has, I thought I'd release a POC for hacking one. It's not exactly hard, the web controller uses a nasty set of Java applets to interact with itself. The shocking thing ...

Elastic Path 4.1 - managerFileManager.jsp?dir Traversal Arbitrary Directory Listing

Elastic Path 4.1 - managerFileManager.jsp?dir Traversal Arbitrary Directory Listing source: https://www.securityfocus.com/bid/28352/info Elastic Path is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include: - A local...

Elastic Path 4.1 - managergetImportFileRedirect.jsp?file Traversal Arbitrary File Access

Elastic Path 4.1 - managergetImportFileRedirect.jsp?file Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/28352/info Elastic Path is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include: - A loc...

Elastic Path 4.1 - '/manager/FileManager.jsp?dir' Traversal Arbitrary Directory Listing

source: https://www.securityfocus.com/bid/28352/info Elastic Path is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include: - A local file-include vulnerability. - An arbitrary file-upload vulnerability. - A...