CVE-2009-0448

CVE-2009-0448 concerns a directory traversal vulnerability in Syntax Desktop 2.7. The flaw resides in admin/modules/aa/preview.php, where a crafted synTarget parameter containing ".." allows remote attackers to include and execute arbitrary local files. The vulnerability enables partial impact to...

CVE-2009-0448: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the synTarget parameter...

Syntax Desktop 2.7 Local File Inclusion

-----------------:local File Include:----------------- ------------------------------------------------------- script: syntax-desktop 2-7 ------------------------------------------------------------------ download...

4Site CMS <= 2.6 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...

AJA Modules Rapidshare 1.0.0 Remote Shell Upload Vulnerability

No description provided by source. AJA Modules Rapidshare 1.0.0 Remote Shell Upload Vulnerability AUTHOR : Hussin X Home : WwW.IQ-TY.CoM & WwW.TrYaG.cc Mail : [email protected] script : http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6 exploit : 1. Change Type Shell from...

4Site CMS 2.6 SQL Injection

WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...

AJA Modules Rapidshare 1.0.0 - Arbitrary File Upload

AJA Modules Rapidshare 1.0.0 - Arbitrary File Upload AJA Modules Rapidshare 1.0.0 Remote Shell Upload Vulnerability AUTHOR : Hussin X Home : WwW.IQ-TY.CoM & WwW.TrYaG.cc Mail : [email protected] script : http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6 exploit : 1. Change...

AJA Modules Rapidshare 1.0.0 Remote Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================== AJA Modules Rapidshare 1.0.0 Remote Shell Upload Vulnerability ============================================================== AJA Modules Rapidshare 1.0.0 Remote Shell Upload...

4Site CMS 2.6 - Multiple SQL Injections

4Site CMS 2.6 - Multiple SQL Injections WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...

AJA Modules Rapidshare 1.0.0 - Arbitrary File Upload

AJA Modules Rapidshare 1.0.0 Remote Shell Upload Vulnerability AUTHOR : Hussin X Home : WwW.IQ-TY.CoM & WwW.TrYaG.cc Mail : [email protected] script : http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6 exploit : 1. Change Type Shell from c99.Php to c99.php.rar and go to...

Ubuntu USN-715-1 (linux)

The remote host is missing an update to linux announced via advisory USN-715-1. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use...

Fedora Core 10 FEDORA-2009-0943 (dia)

The remote host is missing an update to dia announced via advisory FEDORA-2009-0943. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-1057 (dia)

The remote host is missing an update to dia announced via advisory FEDORA-2009-1057. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-0943 (dia)

The remote host is missing an update to dia announced via advisory FEDORA-2009-0943. OpenVAS Vulnerability Test $Id: fcore20090943.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0943 dia Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Drupal Imagefield Upload / Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Drupal Imagefield Module Multiple Vulnerabilities Security Risk: High Exploitable: Remotely Vulnerabilities: Arbitrary File Upload, Cross Site Scripting Discovered by: Justin C. Klein Keane, Andrew Rosborough Tested: Imagefield 5.x-2.2 on Drupal 5.15...

Directory traversal

Multiple directory traversal vulnerabilities in NavBoard 16 2.6.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the module parameter to 1 adminmodules.php and 2 modules.php...

CVE-2008-3866

The Trend Micro Personal Firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which...

CVE-2008-3864: Improper Input Validation

The ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service service crash via a packet with...

CVE-2008-5728: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the system parameter in modules/netshop/post.php; and the...

CVE-2008-5742: Improper Link Resolution Before File Access

Multiple open redirect vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via 1 the redirect parameter in a logoff action to modules/auth/index.php or 2 the url parameter to modules/linkmanager/redirect.php...