CVE-2008-4668: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Image Browser comimagebrowser 0.1.5 component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the folder parameter to index.php...

CVE-2008-4587

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control ISDM.exe 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this...

integramod-database.txt

today i found some major security problem. the issue can be found at all integramod 1.4.x versions. explanation of the issue: all integramod versions do have a backup folder where the daily database backups are stored. the coders of integramod forgott to secure this folder. example: just head to...

Force delete any file and folder-vulnerability warning-the black bar safety net

DEL /F /A /Q \?% 1 RD /S /Q \?% 1 Save As. bat To delete files and folders dragged to the batch...

Integramod 1.4.x - Insecure Directory Download Database

today i found some major security problem. the issue can be found at all integramod 1.4.x versions. explanation of the issue: all integramod versions do have a backup folder where the daily database backups are stored. the coders of integramod forgott to secure this folder. example: just head to...

Design/Logic Flaw

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-3775

Folder Lock 5.9.5 and earlier is affected. The issue is the use of weak password encryption (ROT-25), which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl_pack registry value. No patch/versioned fix is specified in the provided documents. ...

PT-2008-5134 · Newsoft · Folder Lock

Name of the Vulnerable Software and Affected Versions: Folder Lock versions 5.9.5 and earlier Description: The issue concerns the use of weak encryption, specifically ROT-25, for password protection. This weakness allows local administrators to access sensitive information by reading and decrypti...

EasySite 2.3 Multiple Remote Vulnerabilities

No description provided by source. + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion...

CVE-2008-3775: Use of a Broken or Risky Cryptographic Algorithm

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

folderlock-disclose.txt

/ Folder Lock = 5.9.5 Local Password Information Disclosure Authors: Charalambous Glafkos George Nicolaou Date: June 19, 2008 Site: http://www.astalavista.com Mail: [email protected] [email protected] Synopsis: Folder Lock 5.9.5 and older versions are prone to local...

EasySite 2.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================ EasySite 2.3 Multiple Remote Vulnerabilities ============================================ + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + Local File Inclusion...

easysite 2.3 - Multiple Vulnerabilities

easysite 2.3 - Multiple Vulnerabilities + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion...

easysite 2.3 - Multiple Vulnerabilities

EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion http://localhost/www/index.php?module=Accueil&action=../../../../autoexec.bat%00...

phpizabi-traverse.txt

PHPizabi v0.848b traversal file access Vendor url:http://www.phpizabi.net/ Advisore:http://lostmon.blogspot.com/2008/08/ phpizabi-v0848b-traversal-file-access.html Vendor notify:no exploit available:yes Description By vendor page: PHPizabi is one of the most powerful social networking platforms o...

CVE-2008-3499: Undefined Security Weakness

Unspecified vulnerability in "a page in the workarea folder" in Ektron CMS400.NET 7.00 through 7.04 and 7.50 through 7.52 has unknown impact and attack vectors...

xampp-xss.txt

---------------------------------------------------------------- Program : Xampp Linux 1.6.7 Type : Multiple Cross Site Scripting Vulnerabilities Alert : Medium ---------------------------------------------------------------- Download From :...