PT-2011-1866 · Php Fusion · Php-Fusion

Name of the Vulnerable Software and Affected Versions: PHP-Fusion affected versions not specified Description: A directory traversal issue in maincore.php allows remote attackers to include and execute arbitrary local files via a .. dot dot in the folder level parameter. This issue has been...

CVE-2010-4963: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...

PT-2011-1898

Name of the Vulnerable Software and Affected Versions Hulihan BXR version 0.6.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the order by parameter in the folder/list functionality. Recommendations For Hulihan BXR version 0.6.8, avoid using...

WordPress Plugin Relocate Upload 0.14 - Remote File Inclusion

Exploit Title: Relocate Upload Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/relocate-upload Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link: http://wordpress.org/extend/plugins/relocate-upload/download/ Version: 0.14 tested --- P...

Input validation

Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as...

PT-2011-3531 · Microsoft · Display Panning Cpl Extension +11

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...

CVE-2011-1991: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as...

Adobe Shockwave Player Detection (Mac OS X SSH Login)

Detects the installed version of Adobe Shockwave Player on Mac OS X. The script logs in via ssh, and searches for adobe products SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

INSECT Pro 2.7 - Penetration testing tool download

INSECT Pro 2.7 - Penetration testing tool download INSECT Pro 2.7 - Ultimate is here! This penetration security auditing and testing software solutionis designed to allow organizations of all sizes mitigate, monitor and manage the latest security threats vulnerabilities and implement active...

Microsoft Data Access Components (MDAC) Insecure Library Loading (MS11-059; CVE-2011-1975)

This is a remote code execution vulnerability. The vulnerability is due to the improper way in which the MDAC handles the loading of library files DLL. A remote attacker could trigger this vulnerability by enticing a victim to accept and open an excel related file on a remote folder SMB or Webdav...

CodeLock Encrypter v2.7 - Multiple Web Vulnerabilities

Document Title: =============== CodeLock Encrypter v2.7 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-04 Vulnerability Laboratory ID VL-ID: ==================================== 102 Product & Service Introduction: =============================== The PHP/HTML Encryptor & The...

FCK each version of a breakout-vulnerability warning-the black bar safety net

Don't know who the copyright- FCKeditor v2.43 版本 FCKeditor/editor/filemanager/browser/default/connectors/php/config.php FCKeditor V2. 6. 6 version fckeditor/editor/filemanager/connectors/asp/config.php View Editor Version FCKeditor/whatsnew.html...

YxShop easy to Shopping Mall 4. 7. 1 version arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Author: Konstantin Tonight happened to come across this app, went to search a bit and found that with people quite a lot. Also no search to the hackers published the program of the vulnerability, so the lower the source code, find the fckeditor folder, look at its directory structure is there wit...

OmniSecure v7.x DLX - Multiple SQL Injection Vulnerabilities

Document Title: =============== OmniSecure v7.x DLX - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 101 Product & Service Introduction: =============================== One Click Folder Protecti...

CVE-2011-1338

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item...

CVE-2011-1338

XnView on Windows is affected by an untrusted search path vulnerability in versions prior to 1.98.1. The flaw arises when loading executables via the Open containing folder path, allowing a local user to gain privileges by placing a Trojan horse .exe in a target folder. Impact: local privilege es...

CVE-2011-1338: Undefined Security Weakness

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item...

XnView may insecurely load executable files

Overview XnView may use unsafe methods for determining how to load executables .exe XnView is a software for viewing and converting graphic files. XnView loads certain executables when using the "Open containing folder" function. XnView contains an issue with the file search path, which may...

Internet Explorer vulnerable to cross-site scripting

Overview Internet Explorer contains a cross-site scripting vulnerability. Internet Explorer contains a cross-site scripting vulnerability due to the processing of malformed file names. Keigo Yamazaki of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer und...

Devil shell v1.2 - Php shell with DDoS feature !

Devil shell v1.2 - Php shell with DDoS feature ! Features : 1. Design 2. Permission Change of file / Folders 3. Improved DDoS 4. Create Folder 5. Multi uploading 6. Encrypted Title so hard to find by Google. Download Link Username : ugdevil Password : 1234567 For further Query mail me at :...