Sulata iSoft (stream.php)local file inclusion vulnerability-vulnerability warning-the black bar safety net

Vulnerability type: a file that contains Vulnerability description: the stream. php download function to the path the filter is not strict, resulting in a local loading for any file with vulnerabilities. Vulnerability analysis: stream.php ..... //the includeonce"../home/library.php"; the...

Design/Logic Flaw

The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a file by uploading a different file with a similar...

CVE-2010-3092

The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a file by uploading a different file with a similar...

Social worker database+configuration upload scored webshell-vulnerability warning-the black bar safety net

BY:small Wu blog:http://hi. baidu. com/q369568652 Today in the group. A friend lost a station. That is the Universal password to everyone to help look. Sure enough,a universal password to get in. Went in and saw no backup. There is an upload and ewebeditor. ! Thought might win a bit difficult. He...

Improper access control

All Club CMS ACCMS 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat...

CVE-2008-7069

All Club CMS ACCMS 0.0.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database configuration information, including credentials, via a direct request to accms.dat...

aa33code 0.0.1 LFI / Authentication Bypass

aa33code 0.0.1 LFI/Auth Bypass/DCD Multiple Remote Vulnerabilites + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/aa33code/files/aa33code/0.0.1/aa33code-0.0.1.tar.gz/download + Local File Inclusion - PoC...

aa33code 0.0.1 (LFI/Auth Bypass/DCD) Multiple Remote Vulnerabilites

No description provided by source. + aa33code 0.0.1 LFI/Auth Bypass/DCD Multiple Remote Vulnerabilites + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/aa33code/files/aa33code/0.0.1/aa33code-0.0.1.tar.gz/download + Local File...

aa33code 0.0.1 (LFI/Auth Bypass/DCD) Multiple Remote Vulnerabilites

Exploit for unknown platform in category web applications =================================================================== aa33code 0.0.1 LFI/Auth Bypass/DCD Multiple Remote Vulnerabilites =================================================================== + aa33code 0.0.1 LFI/Auth Bypass/DCD...

aa33code 0.0.1 - Local File Inclusion / Authentication Bypass / File Disclosure

aa33code 0.0.1 LFI/Auth Bypass/DCD Multiple Remote Vulnerabilites + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/aa33code/files/aa33code/0.0.1/aa33code-0.0.1.tar.gz/download + Local File Inclusion - PoC...

Valentina Database Config Disclosure

Cyber-Warrior & Security TIM - Bug Researchers Group Application Name : Valentina Vulnerable Type : Arbitrary Database Config Disclosure Vulnerability Infection : SQL Info Get... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/valentina.zip.html - http://www.valya.ru Cyber-Warrior &...

DedeCMSV53 arbitrary variable overwrite vulnerability-vulnerability warning-the black bar safety net

DedeCMSV53 arbitrary variable overwrite vulnerability See today mrxhming students a articles http://hi.baidu.com/mrxhming/blog/item/8176f00bf540f11795ca6b3f.html find this old BUG hasn't been patched to look like, from the inside of the forum go a pp out of it, everyone is welcome to shoot the...

All Club CMS <= 0.0.2 Remote DB Config Retrieve Exploit

No description provided by source. !/usr/bin/perl =about All Club CMS = 0.0.2 Remote DB Config Retrieve Exploit ------------------------------------------------------- by athos - stakerathotmaildotit download on http://sourceforge.net ------------------------------------------------------- Usage:...

All Club CMS 0.0.2 - Remote Database Configuration Retrieve

All Club CMS 0.0.2 - Remote Database Configuration Retrieve !/usr/bin/perl =about All Club CMS 'Lynx textmode', timeout = 5, or die $!; my $send = $http-get"http://$host/$path/accms.dat"; if$send-issuccess print STDOUT $send-content; exit; else print STDERR $send-statusline; exit; if$mode =...

ibase 2.03 - Remote File Disclosure

ibase 2.03 - Remote File Disclosure Name: AFD i-base = 2.03 Author: Dyshoo Vendor: http://www.i-base.net/ Dork: "inurl:ibase site:de" http://site/ibase/zubehoer/download.php?filename=file Database config: http://site/ibase/zubehoer/download.php?filename=../config/configdb.php milw0rm.com 2008-07-...

ibase 2.03 - Remote File Disclosure

Name: AFD i-base = 2.03 Author: Dyshoo Vendor: http://www.i-base.net/ Dork: "inurl:ibase site:de" http://site/ibase/zubehoer/download.php?filename=file Database config: http://site/ibase/zubehoer/download.php?filename=../config/configdb.php milw0rm.com 2008-07-24...

CVE-2007-6260

The installation process for Oracle 10g and llg uses accounts with default passwords, which allows remote attackers to obtain login access by connecting to the Listener. NOTE: at the end of the installation, if performed using the Database Configuration Assistant DBCA, most accounts are disabled ...

Unwanted Access to File System via Import Pages Functionality

security vulnerability found in Confluence 2.5.6 Space administrator can use the "Import Pages from Disk" feature to browse the server file system by pointing the importer at "/" folder or any other folder. Because this folder doesn't contain expected files, an error message is displayed,...

prozilla-sql.txt

--==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

CVE-2006-3370

Blueboy 1.0.3 stores bbnewsconfig.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...