Aspose.Words Exporter < 2.0 - Unauthenticated Arbitrary File Download

The Aspose.Words Exporter WordPress plugin was affected by an Arbitrary File Download security vulnerability. The asposedocexporterdownload.php file of the plugin does not restrict access, check permission or validate the file parameter, allowing unauthenticated user to download any file from the...

WordPress Filedownload Plugin 0.1 (download.php) Remote File Disclosure Vulnerability

No description provided by source...

HP Intelligent Management Center SOM Module Information Disclosure

The HP Intelligent Management Center IMC application running on the remote host is affected by an information disclosure vulnerability in the included IMC Service Operation Management SOM Module, specifically within the FileDownload servlet, due to a failure to require authentication. An...

e107 Filedownload Plugin - Arbitrary File Upload Remote File Disclosure

e107 Filedownload Plugin - Arbitrary File Upload Remote File Disclosure source: https://www.securityfocus.com/bid/54098/info The FileDownload Plugin for e107 is prone to an arbitrary file-upload vulnerability and a remote file-disclosure vulnerability because the application fails to adequately...

e107 FileDownload 1.1 Shell Upload / File Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

e107 Filedownload Plugin - Arbitrary File Upload / Remote File Disclosure

source: https://www.securityfocus.com/bid/54098/info The FileDownload Plugin for e107 is prone to an arbitrary file-upload vulnerability and a remote file-disclosure vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit these issues to...

e107 Plugin - FilleDownload Plugin Upload Shell / Remote File Disclosure

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Mega File Manager 1.0 File Download

Exploit Title: MegaFileManager FileDownload Vulnerability date: 2012-04-19 Author: i2sec-Min Gi Jo Software Link: http://www.awesomephp.com/?Download5 Version: Mega File Manager V 1.0 Tested on: Windows Description : There is no filtering on 'cimages.php' parameter 'name'. PoC :...

Mega File Manager - File Download

Exploit Title: MegaFileManager FileDownload Vulnerability date: 2012-04-19 Author: i2sec-Min Gi Jo Software Link: http://www.awesomephp.com/?Download5 Version: Mega File Manager V 1.0 Tested on: Windows Description : There is no filtering on 'cimages.php' parameter 'name'. PoC :...

PT-2011-5175

Name of the Vulnerable Software and Affected Versions Novell Sentinel Log Manager version 1.2.0.1 938 and earlier Novell Sentinel versions prior to 7.0.1.0 Description The issue allows remote authenticated users to read arbitrary files via a .. dot dot in the filename parameter of the...

CVE-2011-5028: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary files via a .. dot dot in the filename parameter...

Novell Sentinel Log Manager 1.2.0.1 Directory Traversal

Vuln: Path Traversal Application: Sentinel Log Manager Vendor: Novell Version affected: = 1.2.0.1 Website: http://www.novell.com/products/sentinel-log-manager/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it The latest version of Sentinel Log Manager...

WordPress Plugin Filedownload 0.1 - download.php Remote File Disclosure

WordPress Plugin Filedownload 0.1 - download.php Remote File Disclosure Exploit Title: WordPress Filedownload Plugin 0.1 download.php Remote File Disclosure Vulnerability Google Dork: inurl:"/wp-content/plugins/filedownload/download.php/?path" Date: 18-09-2011 Author: Septemb0x CYBER-WARRIOR...

WordPress Filedownload 0.1 File Disclosure

Exploit Title: WordPress Filedownload Plugin 0.1 download.php Remote File Disclosure Vulnerability Google Dork: inurl:"/wp-content/plugins/filedownload/download.php/?path" Date: 18-09-2011 Author: Septemb0x CYBER-WARRIOR Software Link:...

WordPress Filedownload Plugin 0.1 - Remote File Disclosure Vulnerability

TheCartPress plugin's "download.php" parameter is prone to remote file include vulnerability. It allows an attacker to include a remote file and get access to the server. It causes such problems as sensitive information disclosure, corss-site scripting attacks, code execution on the web server...

WordPress <= 0.1 Filedownload Plugin Local File Disclosure Vulnerability

The Filedownload plugin for WordPress is prone to a local file- disclosure vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...

WordPress Plugin Filedownload 0.1 - 'download.php' Remote File Disclosure

Exploit Title: WordPress Filedownload Plugin 0.1 download.php Remote File Disclosure Vulnerability Google Dork: inurl:"/wp-content/plugins/filedownload/download.php/?path" Date: 18-09-2011 Author: Septemb0x CYBER-WARRIOR Software Link:...

WordPress Filedownload Plugin 0.1 (download.php) Remote File Disclosure

Exploit for php platform in category web applications Exploit Title: WordPress Filedownload Plugin 0.1 download.php Remote File Disclosure Vulnerability Google Dork: inurl:"/wp-content/plugins/filedownload/download.php/?path" Date: 18-09-2011 Author: Septemb0x CYBER-WARRIOR Software Link:...

Novell Sentinel Log Manager code execution

fileDownload and reportPluginUpload servlets allow privileged operations to be executed without authentication...

Vulnerabilities in FileDownload Snippet for MODx

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Directory Traversal и Full path disclosure уязвимостях в FileDownload Snippet для MODx. Directory Traversal: http://site/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=../index.php Данная уязвимость может использоваться для...