340 matches found
CMSimple 4.44.4.2 - Remote File Inclusion
CMSimple 4.44.4.2 - Remote File Inclusion ============================================================================================================= o CMSimple - Open Source CMS with no database = Remote File Inclusion Vulnerability Software : CMSimple - Open Source CMS with no database Versio...
Synology DiskStation Manager < 4.3-3810 Update 3 Multiple FileBrowser Component Directory Traversal Vulnerabilities
According to its version number, the Synology DiskStation Manager installed on the remote host is 4.3-x equal or prior to 4.3-3810. It is, therefore, affected by multiple directory traversal vulnerabilities in the FileBrowser component. The issue exists due to improper validation of values...
CVE-2013-6987
Multiple directory traversal vulnerabilities in the FileBrowser components in Synology DiskStation Manager DSM before 4.3-3810 Update 3 allow remote attackers to read, write, and delete arbitrary files via a .. dot dot in the 1 path parameter to filedelete.cgi or 2 folderpath parameter to...
CVE-2013-6987
Synology DiskStation Manager
Synology DSM 4.3-3810 - Directory Traversal
Title: Synology DSM multiple directory traversal Version affected: = 4.3-3810 Vendor: Synology Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: patched CVE: 2013-6987 I'm again here with a Synology DSM vulnerability. Synolo...
Synology DSM 4.3-3810 - Directory Traversal
Exploit for cgi platform in category web applications Title: Synology DSM multiple directory traversal Version affected: = 4.3-3810 Vendor: Synology Discovered by: Andrea Fabrizi Email: email protected Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: patched CVE: 2013-6987 I'm again...
Synology DSM 4.3-3810 Directory Traversal
Title: Synology DSM multiple directory traversal Version affected: = 4.3-3810 Vendor: Synology Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: patched CVE: 2013-6987 I'm again here with a Synology DSM vulnerability. Synolo...
CVE-2013-2036
Cross-site scripting XSS vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "lists of files."...
Cross site scripting
Cross-site scripting XSS vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "lists of files."...
CVE-2013-2036
CVE-2013-2036 is a reflected Cross-Site Scripting (XSS) vulnerability in the Drupal Filebrowser module (6.x-2.x) prior to 6.x-2.2. The issue arises from insufficient sanitization when presenting lists of files, allowing an attacker to inject arbitrary script/HTML. The Drupal security advisory not...
CVE-2013-2036
Cross-site scripting XSS vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "lists of files."...
SA-CONTRIB-2013-046 - Filebrowser - Reflected Cross Site Scripting (XSS)
Filebrowser module allows site administrators to expose a particular file system folder and all of its subfolders with an FTP-like interface to site visitors. The module doesn't sufficiently sanitize user input when presenting lists of files. Because the vulnerability is Reflected Cross Site...
Kohana Framework v2.3.3 - Directory Traversal Vulnerability
Title: ====== Kohana Framework v2.3.3 - Directory Traversal Vulnerability Date: ===== 2013-01-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=841 VL-ID: ===== 837 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: ============...
Kohana Framework 2.3.3 - Directory Traversal
Kohana Framework 2.3.3 - Directory Traversal Title: ====== Kohana Framework v2.3.3 - Directory Traversal Vulnerability Date: ===== 2013-01-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=841 VL-ID: ===== 837 Common Vulnerability Scoring System:...
Kohana v2.3.3 - Directory Traversal Vulnerability
Document Title: =============== Kohana v2.3.3 - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=841 Release Date: ============= 2013-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 837 Commo...
Kohana v2.3.3 - Directory Traversal Vulnerability
Document Title: =============== Kohana v2.3.3 - Directory Traversal Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=841 Release Date: ============= 2013-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 837 Commo...
GetSimple CMS 3.1.2 Local File Inclusion / Path Disclosure
=========================================================================== Author: PuN!Sh3r Vulnerable Software: GetSimple CMS v 3.1.2 Official Site: http://get-simple.info/download/ =========================================================================== Hi to All.. We have Path Disclosure...
Directory traversal
Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote attackers to delete arbitrary files via unspecified filename references in the delfiles parameter...
CVE-2007-3936
CVE-2007-3936 describes a directory traversal vulnerability in admin/filebrowser.asp of the A-shop software, affecting version 0.70 and earlier, and possibly 0.71. The issue allows remote attackers to delete arbitrary files via unspecified filename references in the delfiles parameter. The connec...