Transferable Remote 1.1 XSS / LFI / Command Injection

Title: ====== Transferable Remote v1.1 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=863 VL-ID: ===== 863 Common Vulnerability Scoring System: ==================================== 8.5 Introduction:...

Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities

Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities Title: ====== Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities Date: ===== 2013-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=850 VL-ID: ===== 850 Common Vulnerability Scoring System:...

Wordpress Funny4You plugin 1.0 Local File Include Vulnerability

I found vulnerable Code in /funny4you/funny4you.php line 33. The Parameter $server isn't declared before include. So an attacker can execute some local code about it. This is private exploit. You can buy it at https://0day.today...

Transferable Remote v1.1 iPad iPhone - Web Vulnerabilities

Document Title: =============== Transferable Remote v1.1 iPad iPhone - Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=863 Release Date: ============= 2013-02-09 Vulnerability Laboratory ID VL-ID: ====================================...

WirelessFiles 1.1 iPad iPhone - Multiple Vulnerabilities

WirelessFiles 1.1 iPad iPhone - Multiple Vulnerabilities Title: ====== WirelessFiles v1.1 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-06 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=847 VL-ID: ===== 848 Common Vulnerability Scoring System:...

ezStats2 - style.php Local File Inclusion

ezStats2 - style.php Local File Inclusion source: https://www.securityfocus.com/bid/57757/info ezStats2 is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view...

WirelessFiles v1.1 iPad iPhone - Multiple Web Vulnerabilities

Document Title: =============== WirelessFiles v1.1 iPad iPhone - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=848 Release Date: ============= 2013-02-06 Vulnerability Laboratory ID VL-ID: ==================================...

miniBB 3.x Addon preview Remote File Include Vulnerability

Exploit for php platform in category web applications Exploit Title: miniBB 3.x Addon preview Remote File Include Vulnerability Date: 2013-01-27 Author: bd0rk Vendor or Software Link: http://www.minibb.com/download.php?file=minibbpluginpreview Version: for miniBB 3.x Category:: web applications...

The use of local include vulnerability to execute arbitrary code-a vulnerability warning-the black bar safety net

Impact of program: php-chartv1. 0 Program official: http://php-charts.com/ Defect type: PHP Code Execution. =============================================================== Test platform system: Debian squeeze 6.0.6 Server software version: Apache/2.2.16 Debian PHP 5.3.3-7+squeeze14 with...

ColdFusion E-Commerce (SHOP) <= Local File Include Vulnerability

Adobe ColdFusion suffer from multiple vulnerabilities / bugs in ColdFusion-SHOP , the attacker can use some bug in the software to inject some remote command/code LFI / HTML Injection . This is private exploit. You can buy it at https://0day.today...

WordPress Zingiri Forums Plugin - Local File Include

Zingiri Forums plugin is prone to a local file include vulnerability. It allows an attacker to view files and execute local scripts in the context of the web server process. Solution Update the plugin...

RWCards Component for Joomla! 'mosConfig_absolute_path' Parameter Remote File Include

The version of the RWCards component for Joomla! running on the remote host is affected by a remote file include vulnerability due to improper sanitization of user-supplied input to the 'mosConfigabsolutepath' parameter before using it in the rwcards.advancedate.php script to include PHP code. An...

FirePass SSL VPN - Local File Inclusion

FirePass SSL VPN - Local File Inclusion SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated local file inclusion product: F5 FirePass SSL VPN vulnerable version: = 7.0.0 HF-70-6 fixed version: 7.0.0 HF-70-7...

FirePass SSL VPN - Local File Inclusion

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated local file inclusion product: F5 FirePass SSL VPN vulnerable version: = 7.0.0 HF-70-6 fixed version: 7.0.0 HF-70-7 impact: Critical homepage:...

Joomla Component com_p2dxt Local File Include Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------- Joomla Component comp2dxt Local File Include / LFI -------------------------------------------------------------------------------- Author = Zikou-16 Facebook =...

Design/Logic Flaw

The setdebugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service host crash by writing to the reserved bits of the DR7 debug control register...

openSIS 5.1 - ajax.php Local File Inclusion

openSIS 5.1 - ajax.php Local File Inclusion source: https://www.securityfocus.com/bid/56598/info openSIS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this vulnerability to obtain potentially sensitive...

openSIS 5.1 - 'ajax.php' Local File Inclusion

source: https://www.securityfocus.com/bid/56598/info openSIS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in t...

ATutor 2.1 - tool_file Local File Inclusion

ATutor 2.1 - toolfile Local File Inclusion source: https://www.securityfocus.com/bid/56600/info ATutor is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts i...

ATutor 2.1 - 'tool_file' Local File Inclusion

source: https://www.securityfocus.com/bid/56600/info ATutor is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the web server process. Th...