Directory traversal

Directory traversal vulnerability in the WWWHELP Service js/html/wwhelp.htm in Cyberoam Central Console CCC 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter in an Onlinehelp action...

CVE-2012-1047

Directory traversal vulnerability in the WWWHELP Service js/html/wwhelp.htm in Cyberoam Central Console CCC 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter in an Onlinehelp action...

PT-2012-3038

Name of the Vulnerable Software and Affected Versions Cyberoam Central Console versions 2.00.2 Description A directory traversal issue exists in the WWWHELP Service, specifically in the js/html/wwhelp.htm file, allowing remote attackers to include and execute arbitrary local files. This is achiev...

CVE-2012-1047: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the WWWHELP Service js/html/wwhelp.htm in Cyberoam Central Console CCC 2.00.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter in an Onlinehelp action...

Cyberoam Central Console v2.00.2 - File Include Vulnerability

Exploit for php platform in category web applications ============= Cyberoam Central Console CCC appliances offer the flexibility of hardware CCC appliances and virtual CCC appliances to provide centralized security management across distributed Cyberoam UTM appliances, enabling high levels of...

Cyberoam Central Console 2.00.2 - Remote File Inclusion

Cyberoam Central Console 2.00.2 - Remote File Inclusion Title: ====== Cyberoam Central Console v2.00.2 - File Include Vulnerability Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=405 VL-ID: ===== 405 Introduction: ============= Cyberoam Central...

Cyberoam Central Console 2.00.2 - Remote File Inclusion

Title: ====== Cyberoam Central Console v2.00.2 - File Include Vulnerability Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=405 VL-ID: ===== 405 Introduction: ============= Cyberoam Central Console CCC appliances offer the flexibility of hardware...

Cyberoam Central Console 2.00.2 Local File Inclusion

Title: ====== Cyberoam Central Console v2.00.2 - File Include Vulnerability Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=405 VL-ID: ===== 405 Introduction: ============= Cyberoam Central Console CCC appliances offer the flexibility of hardware...

Cyberoam Central Console v2.x - File Include Vulnerability

Document Title: =============== Cyberoam Central Console v2.x - File Include Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/411.wmv View: http://www.youtube.com/watch?v=pGJy2XNugy8 Release Date: ============= 2012-02-07 Vulnerability Laboratory I...

Cyberoam Central Console v2.2 - File Include Vulnerability

Document Title: =============== Cyberoam Central Console v2.2 - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=405 http://www.vulnerability-lab.com/getcontent.php?id=411 Release Date: ============= 2012-02-07 Vulnerability...

Cyberoam Central Console v2.x - File Include Vulnerability

Document Title: =============== Cyberoam Central Console v2.x - File Include Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/411.wmv View: http://www.youtube.com/watch?v=pGJy2XNugy8 Release Date: ============= 2012-02-07 Vulnerability Laboratory I...

OrangeHRM 2.6.11 - libcontrollersCentralController.php URI Cross-Site Scripting

OrangeHRM 2.6.11 - libcontrollersCentralController.php URI Cross-Site Scripting source: https://www.securityfocus.com/bid/50857/info OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal...

Fedora Update for puppet FEDORA-2011-15000

Check for the Version of puppet OpenVAS Vulnerability Test Fedora Update for puppet FEDORA-2011-15000 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 15 Update: puppet-2.6.12-1.fc15

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...

ME Central Desktop v7.x - Multiple Persistent Vulnerabilities

Document Title: =============== ME Central Desktop v7.x - Multiple Persistent Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 36 Product & Service Introduction: =============================== Desktop Central is a...

ME Central Desktop v7.x - Multiple Persistent Vulnerabilities

Document Title: =============== ME Central Desktop v7.x - Multiple Persistent Vulnerabilities Release Date: ============= 2011-09-06 Vulnerability Laboratory ID VL-ID: ==================================== 36 Product & Service Introduction: =============================== Desktop Central is a...

Bonza Digital Cart Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the comma...

Bonzo Cart Cross Site Scripting / SQL Injection

============================== Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example...

Low: Red Hat Security Advisory: rgmanager security, bug fix, and enhancement update

An updated rgmanager package that fixes one security issue, several bugs, and adds multiple enhancements is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score,...

Symantec Web Gateway Detection

Symantec Web Gateway was detected on the remote host. This application protects against web-based malware and data loss. The host may be configured as a Central Intelligence Unit, which provides centralized management for multiple gateways. Note: When HTTP credentials are configured, the anti-vir...