5284 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in display.php in Obsession-Design Image-Gallery ODIG 1.1 allows remote attackers to inject arbitrary web script or HTML via the folder parameter...
Internet Explorer Drag and Drop Code Execution (CVE-2005-0053)
Microsoft Internet Explorer provides a number of ways to represent remote or local content. One of its more powerful features is the Web folder view. The Web folder provides easy access to files located on a web server. A vulnerability exists in the Microsoft Internet Explorer security restrictio...
mysql provide the right error message [mysql] ERROR 1-bug-warning-the black bar safety net
If the ROOT mention the right to encountered in the process mysql ERROR 1: Can't create/write to file The reasons are the following 1, folder permissions is not enough,you want to give the USERS group read and write permissions; 2, folder, disk full,file write not to go in;empty folder 3, your...
Microsoft Windows Media Player Arbitrary File Download (MS03-017; CVE-2003-0228)
Microsoft Windows Media Player is an application that is used to play various media files, such as those compressed with AVI, MP3, MPG formats and so on. Windows Media Player runs on the Microsoft Windows operating system. Windows Media Player has the ability to change its user interface and...
Citrix Program Neighborhood Agent Arbitrary Shortcut Creation (CVE-2004-1077)
Citrix Presentation Server, formally known as Citrix MetaFrame, is designed for central application deployment. This package allows applications to be deployed and managed by a farm of dedicated servers and allow client machines to access these applications remotely. There exists an arbitrary...
ES Simple Uploader 1.1 - Arbitrary File Upload
ES Simple Uploader 1.1 - Arbitrary File Upload ======================================================================================== | Title : ES Simple Uploader v 1.1 Upload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El...
Quick Heal Antiviral products weak permissions
Weak permissions on installation folder...
Internet Explorer Drag and Drop Elevation of Privilege (MS04-038; CVE-2004-0839)
Microsoft Internet Explorer provides a number of ways to represent remote or local content. One of it's more powerful features is the Web folder view. The Web folder provides easy access to files located on a web server. A vulnerability exists in the way Internet Explorer uses the web folder view...
VanDyke SecureCRT Arbitrary Configuration Folder Specification (CVE-2004-1541)
SecureCRT is a popular terminal application which provides support for a number of remote access protocols such as SSH1, SSH2 and Telnet. A vulnerability exists in the way VanDyke SecureCRT handles telnet URLs. Through the use of a telnet URL, SecureCRT can be remotely supplied a parameter which...
In the Rising-2 0 1 0 full protection under the created folder-vulnerability warning-the black bar safety net
program createfolder; uses Windows; const DIRECTORYALLACCESS = STANDARDRIGHTSREQUIRED or $F; FILECREATE = $0 0 0 0 0 0 0 2; FILEDIRECTORYFILE = $0 0 0 0 0 0 0 1; OBJCASEINSENSITIVE = $0 0 0 0 0 0 4 0; type NTSTATUS = ULONG; PUnicodeString = ^TUnicodeString; TUnicodeString = packed record Length:...
Mura CMS
ONSEC-09-020 Mura CMS root folder disclosure Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Description: content...
Mura CMS 5.1 Root folder disclosure
Exploit for unknown platform in category web applications =================================== Mura CMS 5.1 Root folder disclosure =================================== Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer:...
Mura CMS 5.1 Root folder disclosure
No description provided by source. ONSEC-09-020 Mura CMS root folder disclosure Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir Vorontsov OnSec Russian Security Group...
Mura CMS 5.1 Folder Disclosure
ONSEC-09-020 Mura CMS root folder disclosure Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Description: content...
Avast! Antivirus weak permissions
Weak permissions for installation folder...
Amiro.CMS 5.4.0.0 Root Folder Disclosure
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of notification Developer: 01.07.2009...
Amiro.CMS <= 5.4.0.0 folder disclosure
Exploit for unknown platform in category web applications ====================================== Amiro.CMS = 5.4.0.0 folder disclosure ====================================== ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005...
Amiro.CMS <= 5.4.0.0 folder disclosure
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of...
CVE-2009-3716
Unrestricted file upload vulnerability in admin.php in MCshoutbox 1.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in smilies/...
Code injection
WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname...