Mambo Module Weather - 'absolute_path' Remote File Inclusion

============================================================ Mambo/Joomla Module Weather absolutepath Remote File include Vuln ============================================================ Found By : Cold z3ro , [email protected] ============================================================...

Mambo Module Calendar (Agenda) 1.5.5 - Remote File Inclusion

================================================================== Mambo module Calendar Agenda = 155 comcalendar.php Multiple RFI Vuln ================================================================== Found By : Cold z3ro , [email protected]...

CVE-2007-1138

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...

CVE-2007-1138

Absolute path traversal vulnerability in listmainpages.php in Cromosoft Simple Plantilla PHP SPP allows remote attackers to list arbitrary directories, and read arbitrary files, via an absolute pathname in the nfolder parameter...

CVE-2007-1138

CVE-2007-1138 affects Cromosoft Simple Plantilla PHP (SPP). A vulnerability in list_main_pages.php allows absolute path traversal via the nfolder parameter, enabling remote attackers to list arbitrary directories and read arbitrary files. The issue is rooted in an improper handling of absolute pa...

PT-2007-1294 · Jobline · Jobline

Name of the Vulnerable Software and Affected Versions: Jobline version 1.1.1 Description: A remote file inclusion issue exists, allowing remote attackers to execute arbitrary code via a URL in the mosConfig absolute path parameter in the admin.jobline.php script. Recommendations: For Jobline...

wordpress absolute path disclosure+analysis-vulnerability warning-the black bar safety net

Inadvertently change on storm path, it should be all versions are tested the official version and several beta version, the specific version of the exploit code where the line number is different, and is an array and the variables of the old issues, I believe that many places are also there. The...

CVE-2007-0118

Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to 1 edittag.cgi, 2 edittag.pl, 3 edittagmp.cgi, or 4 edittagmp.pl...

CVE-2007-0118

CVE-2007-0118: Multiple absolute path traversal vulnerabilities affect EditTag 1.2. Remote attackers can read arbitrary files by supplying an absolute pathname in the file parameter to one of four scripts: edittag.cgi, edittag.pl, edittag_mp.cgi, or edittag_mp.pl. The NVD entry documents the vuln...

CVE-2007-0118

Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to 1 edittag.cgi, 2 edittag.pl, 3 edittagmp.cgi, or 4 edittagmp.pl...

Limbo CMS Module event 1.0 - Remote File Inclusion

----------------------------------------------- Limbo CMS event module lmabsolutepath Remote File Include Vulnerabilities ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

phplive support request.php文件存在SQL注入漏洞以及暴绝对路径漏洞

暂无 php live =3.2.2 无 http://xxx.com/livechat/request.php?l=login&x=1%20and%20select%20count%20from%20mysql.user0/ 表: chatadmin login password ---------------------------------------------------------- 绝对路径 http://xxx.co...

CVE-2006-6384

CVE-2006-6384 affects the aBitWhizzy web application component abitwhizzy.php, prior to version 20061204. The vulnerability is an absolute path traversal in the Filename field (f parameter) that allows remote attackers to read arbitrary files. The issue is a variant of CVE-2006-6084. Related entr...

CVE-2006-6384: Undefined Security Weakness

Absolute path traversal vulnerability in abitwhizzy.php before 20061204 allows remote attackers to read arbitrary files via an absolute pathname in the Filename text window f parameter, a variant of CVE-2006-6084...

CVE-2006-5971

CVE-2006-5971 describes an absolute path traversal vulnerability in Verity Ultraseek (admin/logfile.txt) prior to version 5.6.2. An attacker could read arbitrary files by supplying a crafted name variable, enabling partial confidentiality impact. The issue is rooted in improper validation of file...

IBM AIX UMOUNTALL命令绝对路径漏洞

IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的umountall命令在处理绝对路径时存在安全漏洞。 目前更多信息不详。 IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： IBM APAR IY79485 http://www-1.ibm.com/support/docview.wss?uid=isg1IY79485 IBM APAR IY75283...

动网(DVBBS)存在泄露绝对路径漏洞

问题出在DvClsMain.asp的44行： CacheName = LcaseReplaceReplaceReplaceServer.MapPath"index.asp","index.asp","",":","","\\\\","" 和46行: Forumsn = ReplaceCacheName,"","" 这里把web绝对路径放进Forumsn，在以cookie的形式返回给客户，导致web绝对路径泄漏。 DVBBS 7.1.0 更新最新补丁。...

P-News 1.16 - Remote File Inclusion

============================================ P-News 1.16, 1.17 Remote File Inclusion Vulnerability ============================================ Discovered by vegas78 - feel82atweb.de ============================================ Greetz: scoper, corny, smaesch0r, Sascha Schmalz, ReFleCtion, BleX,...

PT-2006-5738 · Joomla · Bsq Sitestats

Name of the Vulnerable Software and Affected Versions: BSQ Sitestats bsq sitestats versions prior to 2.1.1 for Joomla! Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute path parameter. This can be exploited by sending a malicious URL ...

CVE-2006-4781: Undefined Security Weakness

Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded MT 1.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name. NOTE: Some detai...