3550 matches found
CVE-2009-2166
Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...
CVE-2009-2166
Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...
CVE-2009-2166
CVE-2009-2166 affects OCS Inventory NG: cvs.php information disclosure vulnerability that allows an attacker to read arbitrary files on Unix systems by supplying a full pathname in the log parameter, due to an absolute path traversal issue. Affected version: before 1.02.1. Root cause: improper ha...
PHP 5.2.10 safe_mode Bypass
PHP safemode bypass with exec/system/passthru Once again php public new version :php5.2.10 ,and it fix lots of bugs, like this : Bug 45997safemode bypass with exec/system/passthru incorrect fix php5.2.10 ... b = strrchrcmd, PHPDIRSEPARATOR; ifdef PHPWIN32 if b && b == '\' && b == cmd...
Coppermine Photo Gallery 1.4.22 - SQL Injection
!/usr/bin/perl Coppermine Photo Gallery '; banner; $lwp-defaultheader'Accept-Language: en-us,en;q=0.5'; my $html = injrequest' WHERE x'; Wrong query to obtain an error ifnot defined $html print "- Request mistake. Exploit terminated!\n"; exit ; elsif$html = /There was an error while processing a...
Copermine Photo Gallery 1.4.22 LFI / SQL Injection
!/usr/bin/perl Coppermine Photo Gallery '; banner; $lwp-defaultheader'Accept-Language: en-us,en;q=0.5'; my $html = injrequest' WHERE x'; Wrong query to obtain an error ifnot defined $html print "- Request mistake. Exploit terminated!\n"; exit ; elsif$html = /There was an error while processing a...
Directory traversal
Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. encoded dot dot or an absolute pathname in the nextfile parameter...
Path traversal
Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R24 and possibly 1.00R22 allows remote attackers to read arbitrary files via an absolute pathname in the thisfile parameter. NOTE: traversal via a .. dot dot is probably als...
CVE-2009-1559
Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R24 and possibly 1.00R22 allows remote attackers to read arbitrary files via an absolute pathname in the thisfile parameter. NOTE: traversal via a .. dot dot is probably als...
CVE-2009-1559
Absolute path traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R24 and possibly 1.00R22 allows remote attackers to read arbitrary files via an absolute pathname in the thisfile parameter. NOTE: traversal via a .. dot dot is probably als...
CVE-2009-1559
The CVE-2009-1559 entry relates to an absolute path traversal vulnerability in the adm/file.cgi component of the Cisco Linksys WVC54GCA wireless video camera. Affected firmware is listed as 1.00R24 and possibly 1.00R22. The vulnerability allows remote attackers to read arbitrary files by supplyin...
CVE-2009-1504
Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1."...
CVE-2009-1504
Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1."...
CVE-2009-1504
CVE-2009-1504 affects Absolute Form Processor XE 1.5. The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to “lvl=1&userid=1.” This is supported by NVD/NVD-derived details; CVSS metrics indicate network attack, low co...
Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln
No description provided by source. Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln ---------------------------------------------------------- Discovered By: ZoRLu Date: 11.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes...
Absolute Form Processor XE-V 1.5 auth Bypass SQL Injection Vuln
Absolute Form Processor XE-V 1.5 auth Bypass SQL Injection Vuln. Webapps exploit for asp platform ----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion...
Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln
Exploit for asp platform in category web applications ============================================================== Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln ============================================================== Absolute Form Processor XE-V 1.5 Insecure Cookie...
Absolute Form Processor XE-V 1.5 Remote Change Pasword Exploit
Exploit for asp platform in category web applications ============================================================== Absolute Form Processor XE-V 1.5 Remote Change Pasword Exploit ============================================================== Absolute Form Processor XE-V 1.5 Remote Change Pasword...
Absolute Form Processor XE-V 1.5 - Insecure Cookie Handling
Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln ---------------------------------------------------------- Discovered By: ZoRLu Date: 11.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes Hecker Olmus :S N0T: if you wanna...