6082 matches found
PT-2006-5498 · Mcgallerypro · Mcgallery Pro
Name of the Vulnerable Software and Affected Versions: mcGalleryPRO 2006 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path to folder parameter in the random2.php file. Recommendations: For mcGalleryPRO 2006, consider restricting access to the...
CVE-2006-4675
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors...
CVE-2006-4675
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors...
CVE-2006-4675
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors...
CVE-2006-4675: Undefined Security Weakness
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to upload executable files into the data/media folder via unspecified vectors...
webinsta.txt
+-------------------------------------------------------------------- + + WEBInsta Mailing list manager cabsolutepath 1.3e RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/+ WEBInstaMailinglistmanagercabsolutepath1.3eRFI.htm +...
CVE-2006-4311: Undefined Security Weakness
PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1Adressbuch/delete.php...
CVE-2006-4255
CVE-2006-4255 affects Horde IMP H3 before 4.1.3. The vulnerability is a Cross-Site Scripting (XSS) flaw in horde/imp/search.php, reported as injectible via multiple unspecified vectors related to folder names and the vfolder_label field in the IMP search screen. Affected component is the IMP webm...
Sonium Enterprise Adressbook 0.2 - folder Include
Sonium Enterprise Adressbook 0.2 - folder Include +-------------------------------------------------------------------- + + Sonium Enterprise Adressbook Version 0.2 folder RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/342/org/SoniumEnterpriseAdressbookVersion0.2folderRFI.ht...
AOL weak permissions
Application folder has Everyone:Full Control permission...
CVE-2004-2663: Undefined Security Weakness
The 1 SetDebugging and 2 RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder...
WEBInsta Mailing list manager (cabsolute_path) 1.3e RFI
+-------------------------------------------------------------------- + + WEBInsta Mailing list manager cabsolutepath 1.3e RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/+ WEBInstaMailinglistmanagercabsolutepath1.3eRFI.htm +...
Several home malicious code-vulnerability warning-the black bar safety net
Here to say a few page malicious code:"not is to let everybody put these code into your homepage! Just want everyone to be able to understand the malicious code, play a better protective effect!" A, The Loop code: "Put the following code added to the page, you can achieve the above effects" img...
WEBInsta MM 1.3e - 'cabsolute_path' Remote File Inclusion
+-------------------------------------------------------------------- + + WEBInsta Mailing list manager 1.3e cabsolutepath RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/ + WEBInstaMailinglistmanagercabsolutepath1.3eRFI.htm +...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution (extra)
Exploit for hardware platform in category remote exploits =================================================================== Barracuda Spam Firewall /cgi-bin/previewemail.cgi?file=/mail/mlog/../tmp/backup/periodicconfig.txt.tmp https:///cgi-bin/previewemail.cgi?file=/mail/mlog/../../bin/ls%20/|...
From encryption software and with the mouth to save back to the file-vulnerability warning-the black bar safety net
Today dad just bought a U disk, but no encryption function, then check the Internet the following folder encryption software, but see there are people asking how to get back has been encrypted, the software today get up to people and claiming to defense-level encryption of the“high strength folde...
Update Protection against ASP.NET Information Disclosure Vulnerability (MS06-033)
ASP.NET is collection of technologies within the.NET Framework that enable developers to build Web applications and XML Web Services. An information disclosure vulnerability exists in ASP.Net that could allow an attacker to bypass ASP.Net security and gain unauthorized access to objects in the...
CVE-2006-1300
Microsoft .NET framework 2.0 ASP.NET in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."...
Microsoft Security Bulletin MS06-033 Vulnerability in ASP.NET Could Allow Information Disclosure (917283)
Microsoft Security Bulletin MS06-033 Vulnerability in ASP.NET Could Allow Information Disclosure 917283 Published: July 11, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows NET Framework 2.0 Impact of Vulnerability: Information Disclosure Maximum Severi...
CVE-2006-3281: Improper Input Validation
Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ %2e%2e%5c sequences and whose extension contains the CLSID Key identifier...