6 matches found
Unfixed XSS vulnerability at casus-team.com
Security researcher Comando, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting casus-team.com, which at the time of submission ranked 512957 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is currentl...
CVE-2004-2287: Undefined Security Weakness
Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. dot dot in the wdir parameter...
CVE-2000-0872: Undefined Security Weakness
explorer.php in PhotoAlbum 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot attack...
phpPhotoAlbum.txt
PhotoAlbum 0.9.9 explorer.php Vulnerability + Advisory by pestilence www.synnergy.net |===============================================| Affected program: PhotoAlbum v0.9.9 previous ? System : Linux, UNIX, Windows Problem : Problem located within the explorer.php script. Discovery :...
PhotoAlbum 0.9.9 explorer.php Vulnerability
Affected program: PhotoAlbum v 0.9.9 previous ??? Vulnerability: Problem located within the explorer.php script. Any user is able to pass a directory as request to the script, the script will read the directory and output all files included in it and has read access. for instance:...