67 matches found
DEDECMS get SHELL EXP-vulnerability warning-the black bar safety net
Network transmission is said to know the background to use, but don't, as long as the plus the directory exists, the server can even outside, you can get the shell www.t00ls.net5 G$ w& h" m! n9 S: G Before the title conditions, you must ready yourself for the dede database, and then insert the...
CVE-2009-4896
Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful mlmmj 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. dot d...
CVE-2008-1286
CVE-2008-1286 affects Sun Java Web Console 3.0.2/3.0.3/3.0.4, where remote attackers may bypass access restrictions and determine the existence of files/directories via unknown vectors, compromising confidentiality. Patches referenced in connected advisories include Solaris 8/9/10 updates (e.g., ...
CVE-2006-5725
The CVE-2006-5725 entry affects the SSL server in AEP Smartgate 4.3b, where remote attackers can determine the existence of directories by requesting a directory URI and receiving different HTTP status codes for existing vs non-existing directories. This describes an information-disclosure flaw i...
CVE-2002-1837
The CVE-2002-1837 vulnerability affects Image Display System (IDS) 0.81 and is triggered by getAlbumToDisplay in idsShared.pm, where using .. in the album parameter enables remote attackers to verify the existence of arbitrary directories, evidenced by different error messages depending on whethe...
Image Display System 0.8.1 - Directory Existence Disclosure
source: https://www.securityfocus.com/bid/4870/info IDS Image Display System is an web based photo album application written in Perl. IDS is freely available and is maintained by Ashley M. Kirchner. Users can confirm the existence and location of various directories residing on the IDS host. This...
Image Display System 0.8.1 - Directory Existence Disclosure
Image Display System 0.8.1 - Directory Existence Disclosure source: https://www.securityfocus.com/bid/4870/info IDS Image Display System is an web based photo album application written in Perl. IDS is freely available and is maintained by Ashley M. Kirchner. Users can confirm the existence and...