OpenClaw path traversal vulnerability (CNVD-2026-13428)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a path traversal vulnerability. The vulnerability stems from the browser download assistant accepting uncleaned output paths, which can be exploited by an attacker to traverse a directory on a system t...

EUVD-2008-5546

Malware in sbrugna...

dotnetindex Professional Download Assistant 0.1 SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32706/info Professional Download Assistant is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

CVE-2008-5571

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

Sql injection

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

CVE-2008-5571

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

CVE-2008-5571

CVE-2008-5571 describes an SQL injection vulnerability in the web app Professional Download Assistant 0.1 , specifically in admin/login.asp . An attacker can pass crafted values in the two fields, uname (user) or psw (passwd), to cause arbitrary SQL execution on the backend database. This can lea...

Professional Download Assistant 0.1 (Auth Bypass) SQL Injection Vuln

Exploit for unknown platform in category web applications ==================================================================== Professional Download Assistant 0.1 Auth Bypass SQL Injection Vuln ==================================================================== Professional Download Assistant 0....

Professional Download Assistant 0.1 SQL Injection

Professional Download Assistant 0.1 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com Date: 08/12/2008 N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

Professional Download Assistant Database Disclosure

Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : Professional Download Assistant Download :...

Professional Download Assistant 0.1 (Auth Bypass) SQL Injection Vuln

No description provided by source. Professional Download Assistant 0.1 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com Date: 08/12/2008 N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK,...

Professional Download Assistant 0.1 - Authentication Bypass

Professional Download Assistant 0.1 - Authentication Bypass Professional Download Assistant 0.1 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com Date: 08/12/2008 N0T: TUM iSLAM ALEMiNiN BAYRAMINI...

Professional Download Assistant 0.1 Database Disclosure Vulnerability

No description provided by source. Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : Professional Download...

Professional Download Assistant 0.1 - Database Disclosure

Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : Professional Download Assistant Download :...

Professional Download Assistant 0.1 Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Professional Download Assistant 0.1 Database Disclosure Vulnerability ===================================================================== Professional Download Assista...

Professional Download Assistant 0.1 - Database Disclosure

Professional Download Assistant 0.1 - Database Disclosure Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script :...