PHP-CON 1.3 (include.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= PHP-CON 1.3 include.php Remote File Inclusion Vulnerability ============================================================= PHP-CON v1.3 include.phpRemote File Inclusion...

PHP-CON 1.3 - 'include.php' Remote File Inclusion

PHP-CON 1.3 - 'include.php' Remote File Inclusion Script : http://sourceforge.net/project/showfiles.php?groupid=182182 POC : /PHPCON/Exchange/include.php?webappcfgAPPPATH= Evil Code milw0rm.com 2007-11-28...

CVE-2002-1989: Undefined Security Weakness

Resin 2.1.1 allows remote attackers to cause a denial of service thread and connection consumption via multiple URL requests containing the DOS 'CON' device name and a registered file extension such as .jsp or .xtp...

CVE-2003-1205: Undefined Security Weakness

Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service crash by renaming a file to the "con" MS-DOS device name...

CVE-2001-0696

NetWin SurgeFTP 2.0a and 1.0b are affected by CVE-2001-0696: a remote attacker can cause a denial of service (crash) by issuing a CD command to a directory named with an MS-DOS device name (e.g., con). The available sources confirm the vulnerability exists and describe the impact as a crash/DoS, ...

CVE-2001-0492: Undefined Security Weakness

Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing 1 con, 2 com2, or 3 com3...

dae_sambar44.pl

daemon-root's security research Advisory Name: daesambar44b4 Release Date: 10 November 2000 Application: Sambar Server 4.4 Beta 4 Windows http://www.sambar.com Platform: Windows 95, 98 Severity: The server is still vulnerable for the infamous /con/con exploit Author: daemon-root...