WCMS 代码问题漏洞

WCMS is a content management system CMS. A security vulnerability exists in WCMS version 0.3.2. An attacker can use this vulnerability to write arbitrary strings to custom file names and upload arbitrary files, or write malicious code to execute scripts to trigger command execution...

CVE-2010-2449

Gource through 0.26 logs to a predictable file name /tmp/gource-$UID.tmp, enabling attackers to overwrite an arbitrary file via a symlink attack...

Gnuboard 4.34.20 Cross Site Scripting

Exploit Title: gnuboard = 4.34.20 XSS vulnerability via arbitrary file name Date: 2012-03-12 Author: wh1ant Software Link: http://sir.co.kr/bbs/board.php?botable=g4pds&wrid=7108 Version: gnuboard = 4.34.20 Tested on: windows 7 Ultimate K Company: trinitysoft Group: secuholic 1 Vulnerability...