Mega File Manager 1.0 Local File Inclusion

Mega File Manager 1.0 index.php page Local File Inclusion Vulnerability + Discovered By SirGod + http://insecurity-ro.org + Homepage : http://www.awesomephp.com/?MegaFileManager + Note : The script is full of SQL Injection vulns,but I am tired to make querys now. + Local File Inclusion...

DM FileManager 3.9.2 Insecure Cookie Handling Vulnerability

No description provided by source. DM FileManager 3.9.2 Insecure Cookie Handling Vuln Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://dutchmonkey.com Special Thx: Snakespc Note: Algerie 3-1 Egypt Exploit: ------ javascript:document.cookie="USER=user name ;path=/";...

DM FileManager 3.9.2 - Insecure Cookie Handling

DM FileManager 3.9.2 - Insecure Cookie Handling DM FileManager 3.9.2 Insecure Cookie Handling Vuln Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://dutchmonkey.com Special Thx: Snakespc Note: Algerie 3-1 Egypt Exploit: ------ javascript:document.cookie="USER=user name...

[SECURITY] Fedora 10 Update: gnome-web-photo-0.3-18.fc10

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

[SECURITY] Fedora 9 Update: gnome-web-photo-0.3-21.fc9

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

[SECURITY] Fedora 9 Update: gnome-web-photo-0.3-20.fc9

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

CVE-2009-1288

Multiple cross-site scripting XSS vulnerabilities in the Advanced Management Module AMM on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via 1 the username in a login action or 2 the PATH parameter to...

CVE-2008-6541

Unrestricted file upload vulnerability in the file manager module in DotNetNuke before 4.8.2 allows remote administrators to upload arbitrary files and gain privileges to the server via unspecified vectors...

CVE-2008-6541

The CVE-2008-6541 entry describes an unrestricted file upload vulnerability in the DotNetNuke file manager module prior to version 4.8.2. Remote administrators could upload arbitrary files and gain server privileges via unspecified vectors. Affected product: DotNetNuke, component: file manager mo...

[SECURITY] Fedora 9 Update: gnome-web-photo-0.3-19.fc9

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

[SECURITY] Fedora 10 Update: gnome-web-photo-0.3-16.fc10

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

Frog CMS 0.9.4 Traversal / XSS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Evaluation of Frog CMS Version tested: 0.9.4 by Justin C. Klein Keane This advisory is also posted at http://www.madirish.net/vulnerabilities/frog-cms Frog CMS http://www.madebyfrog.com/ is a lightweight content management system written in P...

Cpanel File Manager Cross Site Scripting

Cpanel File Manager XSS Vulnerability Synopsis ------------- Cpanel www.cpanel.net has two file manager application, standard and legacy one to manage files. Both of them are vulnerable to XSS attack. File name is presented unescaped so that an attacker can craft malicious file name to execute...

CPANEL File Manager XSS Vulnerability

Cpanel File Manager XSS Vulnerability Synopsis ------------- Cpanel www.cpanel.net has two file manager application, standard and legacy one to manage files. Both of them are vulnerable to XSS attack. File name is presented unescaped so that an attacker can craft malicious file name to execute...

CVE-2008-6478

Cross-site request forgery CSRF vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft build 4.0.0-365.6.swsoft and 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag...

CVE-2008-6478

Cross-site request forgery CSRF vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft build 4.0.0-365.6.swsoft and 25.4.swsoft build 3.0.0-25.4.swsoft allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag...

CVE-2008-6478

CVE-2008-6478 describes a CSRF vulnerability in the file manager of the VZPP web interface for Parallels Virtuozzo 365.6.swsoft (build 4.0.0-365.6.swsoft) and 25.4.swsoft (build 3.0.0-25.4.swsoft). The flaw allows remote attackers to perform administrator-level actions by enticing a user to load ...

osCommerce 2.2rc1 Creation / Cross Site Scripting

Module : osCommerce Version : 2.2rc1 Edited by : oscommerce.com/ Download : http://www.oscommerce.com/ Downloadfr : http://www.oscommerce-fr.info/portail/index.php?option=comremository&Itemid=183 Vulnerability : Multiple Vulnerability Author : Jonathan Salwan Mail : submit AT shell-storm.org Web ...

[SECURITY] Fedora 9 Update: gnome-web-photo-0.3-18.fc9

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

Libra PHP File Manager 2.0 Local File Inclusion

! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Libra PHP File Manager eNYe-Sec - www.enye-sec.org You can scale directories and read any file that you have permissions use LWP::UserAgent; $ua = LWP::UserAgent-new; print "\e2J"; system$^O eq 'MSWin32' ? 'cls' :...