73 matches found
CVE-2021-40964
A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file with Admin credentials or with the CSRF vulnerability with the "fullpath" parameter containing path traversal strings ../ and .. in order to escape the server's...
CVE-2021-40964
A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file with Admin credentials or with the CSRF vulnerability with the "fullpath" parameter containing path traversal strings ../ and ..\ in order to escape the server's...
CVE-2021-40964: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file with Admin credentials or with the CSRF vulnerability with the "fullpath" parameter containing path traversal strings ../ and ..\ in order to escape the server's...
TinyFileManager 路径遍历漏洞
TinyFileManager is a web-based file manager used to store, upload, edit and manage files and folders online via a web browser. A path traversal vulnerability exists in TinyFileManager 2.4.6 and all versions below, which stems from the software's lack of validation and escaping of the fullpath...
PT-2021-23019
Name of the Vulnerable Software and Affected Versions TinyFileManager versions up to and including 2.4.6 Description A Path Traversal issue exists that allows attackers to upload a file with the fullpath parameter containing path traversal strings ../ and .. to escape the server's intended workin...
Cross-site Scripting (XSS) - Generic in prasathmani/tinyfilemanager
✍️ Description Crss site scripting bug exist via file upload 🕵️♂️ Proof of Concept 1. Upload a file and capture the request in burpsuite . 2. Now change fullpath parameter value to xss payload in burpsuite and forward the request . and see xss is executed Video poc...
Open Conference Systems <= 1.1.4 (fullpath) File Include Vulnerabilities
No description provided by source. Open Conference Systems = 1.1.3 Remote File Inclusion Download Source : http://pkp.sfu.ca/ocs/download/ocs-1.1.3.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; theme.inc.php footer.inc.php bugs ; at -- theme.inc.php...
Afian Document Manager Local File Inclusion
Afian is an application that can add, in just minutes, powerful document management capabilities to any Web server. It provides an Web-based interface for documents residing on the Web server's file system. This software has a secutity hole allow attackers download any files if they know the path...
Afian Local File Inclusion
Afian is an application that can add, in just minutes, powerful document management capabilities to any Web server. It provides an Web-based interface for documents residing on the Web server's file system. This software has a secutity hole allow attackers download any files if they know the path...
CVE-2006-7091: Undefined Security Weakness
PHP remote file inclusion vulnerability in config.php in phpht Topsites FREE 1.022b allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
spg-xss.txt
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;::...
mmgallery.txt
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,, ff;;;;...
Cross site scripting & fullpath disclosure
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + :::: :: ;;tt;;:: + ;;:: ..,,:: ;;ii,,:: + ,,,, ii;;,, ii;;:: ;;ii,,:: + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: +...
mmgallery Multiple vulnerabilities
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,, ff;;;;...
CVE-2006-5613: Undefined Security Weakness
PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler mp3SDS 3.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter...
mp3SDS 3.0 - '/Core/core.inc.php' Remote File Inclusion
Script: MP3 Streaming DownSampler for PHP v3.0 fullpath Remote File Include Exploit Version: 3.0 Script Download: http://damac.us/Projects/mp3SDS/archive/mp3SDS-3.0.tgz Code: requireonce"$fullpath/Core/FormatName.fnc.php"; Exploit: Core/core.inc.php?fullpath=evilscripts? Found: Cyber-Security...
ocs-1.1.3.txt
Open Conference Systems = 1.1.3 Remote File Inclusion Download Source : http://pkp.sfu.ca/ocs/download/ocs-1.1.3.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; theme.inc.php footer.inc.php bugs ; at -- theme.inc.php...
CVE-2006-5308: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems OCS before 1.1.6 allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter in 1 include/theme.inc.php or 2 include/footer.inc.php...
Open Conference Systems <= 1.1.4 (fullpath) File Include Vulnerabilities
Exploit for unknown platform in category web applications ======================================================================== Open Conference Systems = 1.1.4 fullpath File Include Vulnerabilities ======================================================================== Open Conference Systems...
Open Conference Systems <= 1.1.4 (fullpath) File Include Vulnerabilities
No description provided by source. Open Conference Systems = 1.1.3 Remote File Inclusion Download Source : http://pkp.sfu.ca/ocs/download/ocs-1.1.3.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; theme.inc.php footer.inc.php bugs ; at -- theme.inc.php...