CVE-2008-1564

Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a ".." dot dot backslash in the filename...

CVE-2008-1564

CVE-2008-1564 describes a directory traversal vulnerability in Dan Costin File Transfer, prior to version 1.2f. It allows remote attackers to read arbitrary files by supplying a "..\" sequence in the filename. The NVD entry notes a CVSSv2 base score of 4.3 (Medium) with network access and no auth...

CVE-2008-1564

Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a ".." dot dot backslash in the filename...

CVE-2006-6037

The CVE-2006-6037 entry describes multiple XSS vulnerabilities in Dan Jensen Travelsized CMS 0.4.1 and earlier, exploitable via index.php parameters (page, page_id, language). The underlying issue is reflected in the provided description; no exploitation details or exact root cause are given beyo...

CVE-2006-5182

PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setupfolder parameter...

CVE-2006-5182

PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setupfolder parameter...

netscape-cache-exploit.txt

Below is source code for the two versions of the Netscape Cache exploit that was recently discovered by Dan Brumleve , as found on his web site at http://www.shout.net/nothing/cache-cow/index.html First version , and then second version listed. -----snip----- !/usr/bin/perl cache-cow.cgi -- Dan...