xmeasy560-dos.txt

print "--------------------------------------------------------------" print " XM Easy Personal FTP Server 5.6.0 Remote Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site: http://www.shinnai.net" print...

XM Easy Personal FTP Server 5.6.0 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================== XM Easy Personal FTP Server 5.6.0 Remote Denial of Service Exploit ================================================================== print...

XM Easy Personal FTP Server 5.6.0 - Remote Denial of Service

XM Easy Personal FTP Server 5.6.0 - Remote Denial of Service print "--------------------------------------------------------------" print " XM Easy Personal FTP Server 5.6.0 Remote Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinnai" print " mail:...

ScriptsEz Easy Image Downloader Local File Download Vulnerability

Exploit for unknown platform in category web applications ================================================================= ScriptsEz Easy Image Downloader Local File Download Vulnerability ================================================================= ScriptsEz Easy Image Downloader Local Fil...

Scriptsez Easy Image Downloader - Local File Download

ScriptsEz Easy Image Downloader Local File Download Vulnerability url: http://www.scriptsez.net/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not...

CVE-2008-4167

useradmin.php in Easy Photo Gallery aka Ezphotogallery 2.1 does not require administrative authentication, which allows remote attackers to 1 add or 2 remove an Administrator account...

CVE-2008-4167

useradmin.php in Easy Photo Gallery aka Ezphotogallery 2.1 does not require administrative authentication, which allows remote attackers to 1 add or 2 remove an Administrator account...

CVE-2008-4167

CVE-2008-4167 affects Easy Photo Gallery (Ezphotogallery) 2.1. The issue: useradmin.php does not require administrative authentication, allowing remote attackers to (1) add or (2) remove an Administrator account. The root cause, per the description, is a lack of authentication for admin account m...

[SECURITY] Fedora 9 Update: ssmtp-2.61-11.6.fc9.1

A secure, effective and simple way of getting mail off a system to your mail hub. It contains no suid-binaries or other dangerous things - no mail spool to poke around in, and no daemons running in the background. Mail is simply forwarded to the configured mailhost. Extremely easy configuration...

CVE-2008-3926

Multiple directory traversal vulnerabilities in Content Management Made Easy CMME 1.12 allow remote attackers to 1 read arbitrary files via a .. dot dot in the env parameter in a weblog action to index.php, or 2 create arbitrary directories via a .. dot dot in the env parameter in a login action ...

Improper access control

The "Make a backup" functionality in Content Management Made Easy CMME 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover 1 account names and 2 password hashes via a direct request for a backup/cmmedata.zip or b...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin.php in Content Management Made Easy CMME 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action...

Directory traversal

Multiple directory traversal vulnerabilities in Content Management Made Easy CMME 1.12 allow remote attackers to 1 read arbitrary files via a .. dot dot in the env parameter in a weblog action to index.php, or 2 create arbitrary directories via a .. dot dot in the env parameter in a login action ...

CVE-2008-3924

Content Management Made Easy (CMME) 1.12 exposes sensitive data under the web root via its Make a backup feature, allowing remote attackers to directly request backup/cmme_data.zip or backup/cmme_cmme.zip to discover account names and password hashes. Vector a reportedly also affects CMME 1.19. T...

CVE-2008-3925

Cross-site request forgery CSRF vulnerability in admin.php in Content Management Made Easy CMME 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action...

CVE-2008-3205

Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the c parameter...

Directory traversal

Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the c parameter...

CVE-2008-3205

CVE-2008-3205 is a directory traversal vulnerability in the Easy-Script Wysi Wiki Wyg 1.0 web app, exploitable via a dot-dot sequence in the c parameter of index.php to read arbitrary files. The NVD entry gives a CVSSv2 base score of 5.0 (Medium) with network access, low attack complexity, no aut...

CVE-2008-3205

Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the c parameter...

CVE-2008-2853

SQL injection vulnerability in index.php in Easy Webstore 1.2 allows remote attackers to execute arbitrary SQL commands via the catpath parameter...