CVE-2014-3837: Undefined Security Weakness

The document application in ownCloud Server before 6.0.3 uses sequential values for the fileid, which allows remote authenticated users to enumerate shared files via unspecified vectors...

Server: Enumeration of shared files in documents

Due to using the auto-incrementing fileid instead of the random generated token to access files in the documents app an authenticated users could enumerate shared files of other users. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

U-Mail任意文件上传漏洞一枚

简要描述： U-Mail存一处任意文件上传漏洞。 详细说明： 先登录官方测试站点： 这里登录的账号为：mailtest3721 再获取当前登录用户的userid http://mail.comingchina.com/webmail/client/oab/index.php?module=operate&action=member-get&page=1&orderby=&isreverse=1&keyword=mailtest3721 这里mailtest3721对应的userid为:78609 html exp: 上传文件： 上传后获取"fileid":"13995534500" im...

CVE-2008-6093: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Noname CMS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 fileid parameter in a detailansicht action and the 2 kategorie parameter in a kategorien action...

CVE-2005-3502

attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...

CVE-2005-3502: Undefined Security Weakness

attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter...