ScanAlert Security Advisory

ScanAlert Security Advisory http://www.scanalert.com Caucho Resin Multiple Vulnerabilities - Arbitrary File Access & Information Disclosure Date: 5/16/06 Vendor: Caucho Package: Resin Version: 3.0.17 and 3.0.18 – Vendor Confirmed Credit: ScanAlert’s Security and Enterprise Services Teams. Risk:...

Asterisk Recording Interface (ARI) misc/audio.php recording Parameter Traversal Arbitrary File Access

The remote host is running Asterisk Recording Interface ARI, a web-based portal for the Asterisk PBX software. The version of ARI installed on the remote host reportedly allows an unauthenticated attacker to retrieve arbitrary sound files, such as voicemail messages, and to determine the existenc...

SAXoPRESS pbcs.dll url Parameter Traversal Arbitrary File Access

The remote host is running SAXoPRESS or Publicus, web content management systems commonly used by newspapers. The installation of SAXoPRESS / Publicus on the remote host fails to validate user input to the 'url' parameter of the 'apps/pbcs.dll' script. An attacker can exploit this issue to access...

Authorization

Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui authorization to view arbitrary files via unspecified vectors...

Claroline 1.x - 'rqmkhtml.php' Information Disclosure

source: https://www.securityfocus.com/bid/17343/info Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerabl...

Directory traversal

Directory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read arbitrary files via the chemin parameter...

ATutor < 1.5.1-pl1 Multiple Flaws

The remote web server contains a PHP application that is prone to multiple flaws. The remote host is running ATutor, an open-source web-based Learning Content Management System LCMS written in PHP. The version of ATutor installed on the remote host may be vulnerable to arbitrary command execution...

cutenews 1.4.1 Arbitrary File Access

cutenews 1.4.1 Arbitrary File Access Cute news is a powerful and easy for using news management system that use flat files to store its database. It supports comments, archives, search function, image uploading, backup function, IP banning, flood protection ... http://cutephp.com Credit: The...

CuteNews inc/function.php archive Parameter Arbitrary File Access

The version of CuteNews installed on the remote host fails to properly sanitize the 'archive' parameter before using it to read a news file and return it. An unauthenticated, remote attacker may be able to leverage this issue to read arbitrary files on the remote host subject to permissions of th...

Simple PHP Blog 0.4.7.1 - Remote Command Execution

Simple PHP Blog 0.4.7.1 - Remote Command Execution !/usr/bin/perl use IO::Socket; print "Simple PHP Blog this works with magicquotesgpc = Off\r\n\r\n"; short explaination: we have this code in install05.php: ... script is not deleted after installation, so, if magicquotesgpc = Off, you can includ...

LoudBlog 0.41 - 'backend_settings.php' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure vulnerability. These issues allow remote attackers to execute arbitrary PHP...

LoudBlog 0.41 - 'index.php?template' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure vulnerability. These issues allow remote attackers to execute arbitrary PHP...

Gallery 2 Multiple Vulnerabilities

GulfTech Security Research March 02, 2006 Vendor : Bharat Mediratta URL : http://gallery.menalto.com/ Version : Gallery2 = 2.0.2 Risk : Multiple Vulnerabilities Description: Gallery2, the open source web based photo album organizer is one of the most popular php web applications available today...

CherryPy staticFilter Traversal Arbitrary File Access

The remote host is running CherryPy, a web server powered by Python. The installed version of CherryPy fails to filter directory traversal sequences from requests that pass through its 'staticFilter' module. An attacker can exploit this issue to read arbitrary files on the remote host subject to...

Geeklog Remote Code Execution

GulfTech Security Research February 19, 2006 Vendor : Geeklog URL : http://www.geeklog.net/ Version : All Versions Risk : Multiple Vulnerabilities Description: Geeklog is one of the most popular content management systems available today. Geeklog unfortunately is vulnerable to a number of differe...

HP Systems Insight Manager Namazu lang Parameter Traversal Arbitrary File Access

The remote host appears to be running HP Systems Insight Manager SIM, a unified infrastructure management tool. The version of HP SIM on the remote host includes a version of the search engine Namazu that reportedly fails to validate user input to the 'lang' parameter of the 'namazucgi' script. A...

CVE-2006-0625

Directory traversal vulnerability in SpipRSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALStypeurls parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file...

RCBlog index.php post Parameter Traversal Arbitrary File Access

The remote host is running RCBlog, a blog written in PHP. The remote version of this software fails to sanitize user-supplied input to the 'post' parameter of the 'index.php' script. An attacker can use this to access arbitrary files on the remote host provided PHP's 'magicquotes' setting is...

CVE-2006-0347

The CVE-2006-0347 entry describes a directory traversal vulnerability in elog prior to version 2.6.1, allowing remote attackers to access arbitrary files outside the elog directory via ../ sequences in the URL, causing information disclosure. Debian security advisories (DSA-967-1) indicate fixes ...

PHP Upload Center index.php filename Parameter Directory Traversal Arbitrary File Access

The remote host is running PHP Upload Center, a file manager written in PHP. The version of PHP Upload Center installed on the remote host fails to remove directory traversal sequences user input to the 'filename' parameter of the 'index.php' script. An attacker can leverage this flaw to read...