Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit

/ Sysax Multi Server v4.3 Remote Delete Files. Server FTP. http://www.sysax.com/ ------------------------------------------------------------------------------------- A vulnerability is caused due to an input validation error when handling FTP "DELE" requests. This can be exploited to escape the...

Serv-U 7.4.0.1 (MKD) Create Arbitrary Directories Exploit

Exploit for unknown platform in category remote exploits ========================================================= Serv-U 7.4.0.1 MKD Create Arbitrary Directories Exploit ========================================================= !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability ...

RhinoSoft Serv-U FTP Server 7.4.0.1 - MKD Create Arbitrary Directories

RhinoSoft Serv-U FTP Server 7.4.0.1 - MKD Create Arbitrary Directories !/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability is caused due to an input validation error when handling FTP "MKD" requests. This can be exploited to escape the FTP root and create arbitrary directory on th...

RhinoSoft Serv-U FTP Server 7.4.0.1 - 'MKD' Create Arbitrary Directories

!/usr/bin/perl Soft : FTP Serv-U Version : v7.4.0.1 A vulnerability is caused due to an input validation error when handling FTP "MKD" requests. This can be exploited to escape the FTP root and create arbitrary directory on the system via directory traversal attacks using the ".." character...

GuildFTPd FTP Server 0.999.14 - Remote Delete Files

GuildFTPd FTP Server 0.999.14 - Remote Delete Files !/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote Delete Files More detail for the vulnerability = http://secunia.com/advisories/32218/ 2 A vulnerability is caused due to an input validation error when handling FTP "DELE" request...

GuildFTPd FTP Server 0.999.14 - Remote Delete Files

!/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote Delete Files More detail for the vulnerability = http://secunia.com/advisories/32218/ 2 A vulnerability is caused due to an input validation error when handling FTP "DELE" requests. This can be exploited to escape the FTP root and...

GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit

Exploit for unknown platform in category remote exploits ========================================================= GuildFTPd FTP Server 0.999.14 Remote Delete Files Exploit ========================================================= !/usr/bin/perl Exploit: GuildFTPd FTP Server Version 0.x.x Remote...

websvn -- multiple vulnerabilities

Secunia reports: Some vulnerabilities have been reported in WebSVN, which can be exploited by malicious users to disclose sensitive information, and by malicious people to conduct cross-site scripting attacks and manipulate data. Input passed in the URL to index.php is not properly sanitised befo...

Directory traversal

Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. d...

CVE-2007-6471

Incomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a ..\ dot dot backslash in the config parameter...

sentineldetails-traverse.txt

SUMMARY ======= SafeNet Inc.'s Sentinel Protection Server and Sentinel Keys Server products include web servers which are vulnerable to directory traversal attacks. A remote attacker could exploit these vulnerabilities to read arbitrary files with the permissions of the web server, typically...

Directory traversal

The safepath function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a pathname that is at or below the same level as the web document root, but in a different part of the...

CVE-2006-7079

CVE-2006-7079 affects exV2 versions 2.0.4.3 and earlier, in include/common.php. The issue allows remote attackers to overwrite arbitrary program variables and perform directory traversal to execute arbitrary code by modifying xoopsOption['pagetype']. The initial docs provide CVSS data: CVSS v2 ba...

[SA16003] DownloadProtect "file" Disclosure of Sensitive Information

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

phpBB: Multiple vulnerabilities

Background phpBB is an Open Source bulletin board package. Description It was discovered that phpBB contains a flaw in the session handling code and a path disclosure bug. AnthraX101 discovered that phpBB allows local users to read arbitrary files, if the "Enable remote avatars" and "Enable avata...

[SA14360] MediaWiki Multiple Vulnerabilities

TITLE: MediaWiki Multiple Vulnerabilities SECUNIA ADVISORY ID: SA14360 VERIFY ADVISORY: http://secunia.com/advisories/14360/ CRITICAL: Less critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: MediaWiki 1.x http://secunia.com/product/2546/...

[SA13074] FsPHPGallery Denial of Service and Disclosure of System Information Vulnerabilities

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

Sun ONE Starter Kit 2.0 ASTAware SearchDisc 3.1 - Search Engine Directory Traversal

Sun ONE Starter Kit 2.0 ASTAware SearchDisc 3.1 - Search Engine Directory Traversal source: https://www.securityfocus.com/bid/5828/info A vulnerability has been reported for the Sun ONE Starter Kit 2.0 and ASTAware SearchDisc. The Starter Kit includes a search engine facility provided for easy...

CVE-2001-0523

eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that...

CVE-2001-0523

eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that...