CVE-2010-3104: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in DeskShare AutoFTP Manager 4.31, and probably earlier versions, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-3101: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in FTPx Corp FTP Explorer 10.5.19.1 for Windows, and probably earlier versions, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-3103: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in FTPGetter Team FTPGetter 3.51.0.05, and probably earlier versions, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-3102: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SiteDesigner Technologies, Inc. 3D-FTP Client 9.0 build 2, and probably earlier versions, allows remote FTP servers to write arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-3096: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SoftX FTP Client 3.3 and possibly earlier allows remote FTP servers to write arbitrary files via ".." dot dot backslash sequences in a filename...

CVE-2009-4896: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful mlmmj 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. dot d...

CVE-2010-2252: Improper Input Validation

GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a .wgetrc filename followed by a 3xx redirect to a URL wit...

CVE-2010-2251: Improper Input Validation

The get1 command, as used by lftpget, in LFTP before 4.0.6 does not properly validate a server-provided filename before determining the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a Content-Disposition header that suggests a crafted...

DEBIAN-CVE-2010-2322

Absolute path traversal vulnerability in the extractjar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831. NOTE: this vulnerability exists because of an...

CVE-2010-2104: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute of a file element...

Open Forum Server 2.2 b005 Arbitrary File Write

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

OpenForum 2.2 b005 - saveAsAttachment() Method Arbitrary File Creation

OpenForum 2.2 b005 - saveAsAttachment Method Arbitrary File Creation source: https://www.securityfocus.com/bid/40364/info OpenForum is prone to a vulnerability that may allow remote attackers to create arbitrary files on a vulnerable system. Successful exploits will allow an attacker to create...

OpenForum 2.2 b005 - 'saveAsAttachment()' Method Arbitrary File Creation

source: https://www.securityfocus.com/bid/40364/info OpenForum is prone to a vulnerability that may allow remote attackers to create arbitrary files on a vulnerable system. Successful exploits will allow an attacker to create arbitrary files, which may then be executed to perform unauthorized...

CVE-2010-1183: Improper Link Resolution Before File Access

Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager...

CVE-2010-0988: Improper Control of Generation of Code

Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow 1 remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and...

Joomla OzioGallery2 Arbitrary File Write

Exploit Title: Joomla component comoziogallery2 / IMAGIN arbitrary file write Date: 01-01-10 Author: Ubik and er Software Link: oziogallery.joomla.it / imagin.ro Version: all Disclaimer : all the information in this document is provided "as is", for educational purposes only. The authors will not...

Joomla component com_oziogallery2 / IMAGIN arbitrary file write

No description provided by source. Exploit Title: Joomla component comoziogallery2 / IMAGIN arbitrary file write Date: 01-01-10 Author: Ubik and er Software Link: oziogallery.joomla.it / imagin.ro Version: all Disclaimer : all the information in this document is provided "as is", for educational...

Joomla! Component com_oziogallery2 / IMAGIN - Arbitrary File Write

Exploit Title: Joomla component comoziogallery2 / IMAGIN arbitrary file write Date: 01-01-10 Author: Ubik and er Software Link: oziogallery.joomla.it / imagin.ro Version: all Disclaimer : all the information in this document is provided "as is", for educational purposes only. The authors will not...

Joomla! Component com_oziogallery2 IMAGIN - Arbitrary File Write

Joomla! Component comoziogallery2 IMAGIN - Arbitrary File Write Exploit Title: Joomla component comoziogallery2 / IMAGIN arbitrary file write Date: 01-01-10 Author: Ubik and er Software Link: oziogallery.joomla.it / imagin.ro Version: all Disclaimer : all the information in this document is...

CVE-2009-4193: Improper Link Resolution Before File Access

Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file...