2415 matches found
MySQL Quick Admin 1.5.5 - Local File Inclusion
Author: Vinod Sharma Email: [email protected] Date: 05th Nov, 2008 Note: This information is only for educational purpose, author will not bear responsibility for any damages. Directory traversal vulnerability in MySQL Quick Admin 1.5.5 allows remote attackers to read and execute...
Verity's Search 97查看任意文件漏洞
BUGTRAQ: 162 Verity's Search97是Verity公司搜索引擎的Web访问界面。 Verity's Search97的search97.vts脚本未对用户如入做充分过滤，远程攻击者可能利用此漏洞进行目录遍历攻击，导致系统文件泄漏。 软件包中的search97.vts对用户输入的“..”未做充分过滤，攻击者可能通过构造特殊的请求来读取任何服务器上任何Web服务进程有读权限的文件。 2.1 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 暂时停止使用该软件。 厂商补丁： Verity ------...
Security Center < 3.4.2.1 Directory Traversal Arbitrary File Access
The version of Tenable Security Center installed on the remote host appears to be earlier than 3.4.2.1. Such versions contain two vulnerabilities that allow a user who was logged into the Security Center to obtain system files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2008-1945
QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004...
plogger-sql.txt
GulfTech Security Research August 05, 2008 Vendor : Mike Johnson URL : http://www.plogger.org/ Version : Plogger addfile$filecontents, $row"path";...
pligg99-sqlxss.txt
GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be used to steal the cookie data as mentioned earlier in this advisory. Arbitrar...
Pligg <= 9.9.0 (XSS/LFI/SQL) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ Pligg alertdocument.cookie...
Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection
Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...
WordPress <= 2.3.3 'index.php' Arbitrary File Access
Binary data 4482.prm...
Code injection
tss 0.8.1 allows local users to read arbitrary files via the -a parameter, which is processed while tss is running with privileges...
HP OpenView Network Node Manager OpenView5.exe Action Parameter Traversal Arbitrary File Access
The version of HP OpenView Network Node Manager installed on the remote host fails to completely sanitize user input to the 'Action' parameter of the 'OpenView5.exe' CGI script. Using a value with directory traversal sequences containing slashes rather than backslashes, an unauthenticated, remote...
HP OpenView Network Node Manager (OV NNM) 7.x - 'OpenView5.exe?Action' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/28745/info HP OpenView Network Node Manager is prone to multiple vulnerabilities affecting the 'ovalarmsrv.exe' and 'ovtopmd.exe' processes. These issues include a directory-traversal issue and multiple denial-of-service issues. UPDATE April 14, 2008:...
Alkacon OpenCMS 7.0.3 - logfileViewSettings.jsp?filePath.0 Arbitrary File Access
Alkacon OpenCMS 7.0.3 - logfileViewSettings.jsp?filePath.0 Arbitrary File Access source: https://www.securityfocus.com/bid/28152/info Alkacon OpenCms is prone to multiple input-validation vulnerabilities, including one cross-site scripting issue and a file-disclosure issue, because the applicatio...
CVE-2008-0923
Directory traversal vulnerability in the Shared Folders feature for VMWare ACE 1.0.2 and 2.0.2, Player 1.0.4 and 2.0.2, and Workstation 5.5.4 and 6.0.2 allows guest OS users to read and write arbitrary files on the host OS via a multibyte string that produces a wide character string containing...
Directory traversal
Directory traversal vulnerability in SafeNet Sentinel Protection Server 7.4.1.0 and earlier, and Sentinel Keys Server 1.0.4.0 and earlier, allows remote attackers to read arbitrary files via a ..\ dot dot backslash in the URI. NOTE: this issue reportedly exists because of an incomplete fix for...
BitDefender Update Server HTTP Request Traversal Arbitrary File Access
The version of BitDefender Update Server running on the remote host fails to sanitize request strings of directory traversal sequences, which allows an unauthenticated attacker to read files outside the web server's document directory. Note that the server runs with LocalSystem privileges by...
CuteNews < 1.4.6 search.php files_arch Array Arbitrary File Access
Binary data 4324.prm...
Tikiwiki tiki-listmovies.php movie Parameter Traversal Arbitrary File Access
The remote host is running TikiWiki, an open source wiki application written in PHP. The version of TikiWiki installed on the remote host fails to sanitize input to the 'movie' parameter of the 'tiki-listmovies.php' script before using it to access files. An unauthenticated attacker may be able t...
CuteNews search.php files_arch Array Arbitrary File Access
The version of CuteNews on the remote host fails to initialize the 'filesarch' array before populating it with a list of files to search in the 'search.php' script. Regardless of PHP's 'registerglobals' setting, an unauthenticated attacker can leverage this issue to determine the existence of...
CVE-2007-6506
The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to 1 overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly 2 access arbitrary files via the...