Update Protection against Akamai Download Manager Arbitrary Program Execution

In its Update Rollup for ActiveX Kill Bits from February 2009 960715, Microsoft has released a security update to set a kill bit for an ActiveX control developed by Akamai Technologies. Akamai Technologies has released a security update that addresses a vulnerability in the affected...

Directory traversal

Multiple directory traversal vulnerabilities in playSMS 0.9.3 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 gatewaymodule parameter to plugin/gateway/gnokii/init.php and the 2 themesmodule parameter to plugin/themes/default/init.php...

PrestaShop 1.1 - order.php?PATH_INFO Cross-Site Scripting

PrestaShop 1.1 - order.php?PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/32689/info PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

IIS vulnerability application-vulnerability warning-the black bar safety net

by yuange The newly discovered IIS a bunch of vulnerabilities, and talk about the application. Need a virtual executable Directory,WINDOWS common /scripts,/cgi-bin,/vtibin, General/vtibin directory is mapped to the“program files”directory, usually in the system tray above, and the SCRIPTS sometim...

CVE-2008-5015

CVE-2008-5015 affects Mozilla Firefox 3.x prior to 3.0.4. The issue arises when a file: URI is accessed in the same tab as a chrome or privileged about: page, allowing a user-assisted attacker to run arbitrary JavaScript with chrome privileges via code saved locally. The underlying vulnerability ...

Free Articles Directory RFI Vulnerability

Free Articles Directory is prone to a remote file include RFI vulnerability. SPDX-FileCopyrightText: 2008 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2008-4662

Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2008-4592

CVE-2008-4592 : Directory traversal vulnerability in index.php of Sports Clubs Web Panel 0.0.1. The p parameter accepts a .. sequence, enabling remote attackers to include and execute arbitrary local files. Root cause: directory traversal flaw. Impact is described as arbitrary local file access/e...

CVE-2008-4489

Directory traversal vulnerability in ap-save.php in Atarone CMS 1.2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the themechosen parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

Directory traversal

Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to comments.php, a different vector than CVE-2008-3371...

Gentoo Security Advisory GLSA 200410-28 (rssh)

The remote host is missing updates announced in advisory GLSA 200410-28. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUMMARY InstallShield Update Agent - Remote "Rule Script" Code Execution Vulnerability. OVERVIEW InstallShield Update Agent uses insecure methods of retrieving operational script code from unauthenticated, unverified external sources over HTTP...

CVE-2008-3904

src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...

Directory traversal

Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the 1 blogpost, 2 cat, and 3 file parameters to data/inc/themes/predefinedvariables.php, as reachable through index.php; an...

CVE-2008-3405

Directory traversal vulnerability in index.php in Ricardo Amaral nzFotolog 0.4.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the actionfile parameter...

CVE-2008-3384

Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 module and 2 file parameters...

CVE-2008-2913

Directory traversal vulnerability in func.php in Devalcms 1.4a, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currentpath parameter, in conjunction with certain ... triple dot and ..... sequences in the currentfile...

CVE-2008-2876

CVE-2008-2876 affects the web app mUnky version 0.0.1 . The vulnerability is a directory traversal in index.php that allows an attacker to cause local file inclusion via a .. in the zone parameter, enabling arbitrary local file access/execution according to the entry. The CVSS metrics in the init...

CVE-2008-2687

Directory traversal vulnerability in inc/config.php in ProManager 0.73 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

ajarticle-sql.txt

--==+================================================================================+==-- --==+ AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovere...