143 matches found
Code injection
htdocsari/includes/login.php in the ARI Framework module/Asterisk Recording Interface ARI in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ariauth cookie, related to the PHP unserialize function, as exploited in the wild in...
CVE-2014-7235
htdocsari/includes/login.php in the ARI Framework module/Asterisk Recording Interface ARI in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ariauth cookie, related to the PHP unserialize function, as exploited in the wild in...
CVE-2014-7235
CVE-2014-7235 affects the ARI Framework/FreePBX Asterisk Recording Interface login.php. An unauthenticated remote attacker can exploit via the ari_auth cookie to trigger unserialize-based code execution, with exploitation observed publicly and in the wild around 2014. Affected versions include Fr...
VulnCheck KEV: CVE-2014-7235
htdocsari/includes/login.php in the ARI Framework module/Asterisk Recording Interface ARI in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ariauth cookie, related to the PHP unserialize function, as exploited in the wild...
100's of Israel Websites Hacked By Cyber-Warrior / AKINCILAR Group
100's of Israel Websites Hacked By Cyber-Warrior / AKINCILAR Group Cyber-Warrior / AKINCILAR Group has started an attack about the political tension between Turkey and Israel Ahmet Davutoglu - Dr. Michael Ben-Ari, and they still keep attacking. Cyber-Warrior / AKINCILAR Group made a name for...
Home FTP Server Denial Of Service
Date of Discovery: 16-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Ari Pikivirta http://downstairs.dnsalias.net/homeftpserver.html Affected: Home FTP Server 1.10.1.139 Earlier versions may also be affected Overview: Home FTP Server FTP Server is an easy use FTP server Application. Denial of...
Home FTP Server 'SITE INDEX' Command Remote Denial of Service Vulnerability
Date of Discovery: 16-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Ari Pikivirta http://downstairs.dnsalias.net/homeftpserver.html Affected: Home FTP Server 1.10.1.139 Earlier versions may also be affected Overview: Home FTP Server FTP Server is an easy use FTP server Application. Denial of...
Home FTP Server 'MKD' Command Directory Traversal Vulnerability
Date of Discovery: 17-Nov-2009 Credits:zhangmcatmail.ustc.edu.cn Vendor: Ari Pikivirta http://downstairs.dnsalias.net/homeftpserver.html Affected: Home FTP Server 1.10.1.139 Earlier versions may also be affected Overview: Home FTP Server is an easy use FTP server Application. Directory Traversal...
Home FTP Server 1.10.1.139 - SITE INDEX Remote Denial of Service
Home FTP Server 1.10.1.139 - SITE INDEX Remote Denial of Service Exploit Title: Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service Vulnerability Date: 16 Nov 09 Author: zhangmc Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Version: Home FTP...
Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote DOS
Exploit for unknown platform in category dos / poc ======================================================================== Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service ======================================================================== Title: Home FTP Server...
Home FTP Server 1.10.1.139 - 'SITE INDEX' Remote Denial of Service
Exploit Title: Home FTP Server 1.10.1.139 'SITE INDEX' Command Remote Denial of Service Vulnerability Date: 16 Nov 09 Author: zhangmc Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Version: Home FTP Server 1.10.1.139 Tested on: relevant os Code : From: zhangmc mail...
Asterisk Recording Interface (ARI) misc/audio.php recording Parameter Traversal Arbitrary File Access
The remote host is running Asterisk Recording Interface ARI, a web-based portal for the Asterisk PBX software. The version of ARI installed on the remote host reportedly allows an unauthenticated attacker to retrieve arbitrary sound files, such as voicemail messages, and to determine the existenc...
CVE-2006-2021
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...
CVE-2006-2020
Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...
Improper access control
Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...
Path traversal
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...
CVE-2006-2020
Affected product: Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8. Component/issue: Recordings/includes/main.conf stored under the web document root with insufficient access control. Impact (as stated): Remote attackers can obtain password information from the configuration file, v...
CVE-2006-2020
Asterisk Recording Interface ARI in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information...
[Full-disclosure] [SecuriWeb 2006.1] directory traversal in Asterisk@Home and ARI
ID : 2006.1 Product : ARI Asterisk Recording Interface http://www.littlejohnconsulting.com/?q=node/11 Asterisk@home Distribution http://asteriskathome.sourceforge.net/ Affected product : = 0.7.15 Asterisk@Home 2.6 and lower Class : Access to protected information, directory traversal Remote : yes...