CVE-2009-0841: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to create arbitrary files via a .. dot dot in the id parameter...

CVE-2008-6424: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in FFFTP 1.96b allows remote FTP servers to create or overwrite arbitrary files via a response to an FTP LIST command with a filename that contains a .. dot dot...

CVE-2009-0301: Undefined Security Weakness

Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control FlexCell.ocx in FlexCell Grid Control 5.6.9 allow remote attackers to create and overwrite arbitrary files via the 1 SaveFile and 2 ExportToXML methods...

CVE-2008-5966: Improper Input Validation

globsyedit.php in Globsy 1.0 and earlier allows remote attackers to create or overwrite arbitrary files via a filename in the file parameter and file contents in the data parameter...

CVE-2008-5860: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...

Chilkat FTP ActiveX (SaveLastError) Insecure Method Exploit

No description provided by source. html titleChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2/titlebrbr body h3ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit/h3 !c0d3d by callAX ---- 0wN thE b0x p4l - Greetings to str0ke and Fr0git0...

Constructr CMS 3.02.5 SQL Injection / Traversal

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

Chilkat FTP ActiveX (SaveLastError) Insecure Method Exploit

Exploit for unknown platform in category remote exploits =========================================================== Chilkat FTP ActiveX SaveLastError Insecure Method Exploit =========================================================== ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll...

Chilkat FTP - ActiveX (SaveLastError) Insecure Method

Chilkat FTP - ActiveX SaveLastError Insecure Method ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit function Doit File = "c:\boot.ini" ctrl.SaveLastErrorFile milw0rm.com 2008-12-28...

Chilkat FTP - ActiveX (SaveLastError) Insecure Method

ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 ChilkatSocket.DLL Arbitrary File Creation ChilkatFTP.dll v3.0.0.2 Arbitrary Data Write Exploit function Doit File = "c:\boot.ini" ctrl.SaveLastErrorFile milw0rm.com 2008-12-28...

Constructr CMS <= 3.02.5 Stable Multiple Remote Vulnerabilities

No description provided by source. Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info:...

Constructr CMS <= 3.02.5 Stable Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Constructr CMS = 3.02.5 Stable Multiple Remote Vulnerabilities =============================================================== Constructr CMS http://constructr-cms.org/ - =...

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfil...

Constructr CMS 3.02.5 stable - Multiple Vulnerabilities

Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...

CVE-2008-5404: Undefined Security Weakness

Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable...

chilkat-create.txt

ChilkatSocket.DLL Arbitrary File Creation Company Name : Chilkat Software, Inc. Vulnerable DLL : ChilkatSocket.DLL DLL's version : 2,3,1,1 Object Safety Report : Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289C RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety...

Chilkat Socket activex 2.3.1.1 Remote Arbitrary File Creation Exploit

No description provided by source. html titleChilkatSocket.DLL Arbitrary File Creation/titlebrbr body Company Name : Chilkat Software, Inc.brbr Vulnerable DLL : ChilkatSocket.DLLbrbr DLL's version : 2,3,1,1brbr Object Safety Report : br Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289Cbr...

Chilkat Socket activex 2.3.1.1 Remote Arbitrary File Creation Exploit

Exploit for unknown platform in category remote exploits ===================================================================== Chilkat Socket activex 2.3.1.1 Remote Arbitrary File Creation Exploit ===================================================================== ChilkatSocket.DLL Arbitrary Fi...

Chilkat Socket ActiveX 2.3.1.1 - Arbitrary File Creation

Chilkat Socket ActiveX 2.3.1.1 - Arbitrary File Creation ChilkatSocket.DLL Arbitrary File Creation Company Name : Chilkat Software, Inc. Vulnerable DLL : ChilkatSocket.DLL DLL's version : 2,3,1,1 Object Safety Report : Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289C RegKey Safe for Script:...

Chilkat Socket ActiveX 2.3.1.1 - Arbitrary File Creation

ChilkatSocket.DLL Arbitrary File Creation Company Name : Chilkat Software, Inc. Vulnerable DLL : ChilkatSocket.DLL DLL's version : 2,3,1,1 Object Safety Report : Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289C RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety...