net2ftp 0.97 - Cross-Site Scripting Request Forgery

net2ftp 0.97 - Cross-Site Scripting Request Forgery =cicatriz ==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-0804...

net2ftp <= 0.97 Cross-Site Scripting/Request Forgery Vulnerabilities

Exploit for linux platform in category remote exploits ==================================================================== net2ftp = 0.97 Cross-Site Scripting/Request Forgery Vulnerabilities ==================================================================== / / / / // / / // / o / / .-/ =net2f...

net2ftp 0.97 - Cross-Site Scripting / Request Forgery

=cicatriz ==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-0804 Advisory URL:...

net2ftp 0.97 XSS / XSRF

=cicatriz ==advisories= / / / / // / / // / o / / .-/ =net2ftp = 0.97 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: net2ftp = 0.97 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-0804 Advisory URL:...

CVE-2008-5275

Multiple directory traversal vulnerabilities in the a "Unzip archive" and b "Upload files and archives" functionality in net2ftp 0.96 stable and 0.97 beta allow remote attackers to create, read, or delete arbitrary files via a .. dot dot in a filename within a 1 TAR or 2 ZIP archive. NOTE: this c...

Directory traversal

Multiple directory traversal vulnerabilities in the a "Unzip archive" and b "Upload files and archives" functionality in net2ftp 0.96 stable and 0.97 beta allow remote attackers to create, read, or delete arbitrary files via a .. dot dot in a filename within a 1 TAR or 2 ZIP archive. NOTE: this c...

CVE-2008-5275

Multiple directory traversal vulnerabilities in the a "Unzip archive" and b "Upload files and archives" functionality in net2ftp 0.96 stable and 0.97 beta allow remote attackers to create, read, or delete arbitrary files via a .. dot dot in a filename within a 1 TAR or 2 ZIP archive. NOTE: this c...

CVE-2008-5275

CVE-2008-5275 affects net2ftp versions 0.96 stable and 0.97 beta, specifically the (a) Unzip archive and (b) Upload files and archives functionality. A directory traversal flaw allows remote attackers to create, read, or delete arbitrary files by abusing a .. in a filename inside a TAR or ZIP arc...

CVE-2006-5194

Cross-site scripting XSS vulnerability in index.php in net2ftp 0.93 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-5194

CVE-2006-5194 is a documented XSS flaw in net2ftp 0.93, specifically in index.php where the username parameter can be exploited to inject arbitrary script/HTML. The vulnerability is described with a CVSS base score of 4.3 (Medium) and a NETWORK attack vector with no authentication required, but o...

CVE-2006-5194

Cross-site scripting XSS vulnerability in index.php in net2ftp 0.93 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information...

net2ftp.txt

+-------------------------------------------------------------------- + + net2ftp: a web based FTP client : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: net2ftp: a web based FTP client + Venedor ...........:...

CVE-2006-5097

PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to execute arbitrary PHP code via a URL in the applicationrootdir parameter. NOTE: this issue has been disputed by a third party researcher, CVE, and the vendor. The vendor says "th...

CVE-2006-5097

PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to execute arbitrary PHP code via a URL in the applicationrootdir parameter. NOTE: this issue has been disputed by a third party researcher, CVE, and the vendor. The vendor says "th...

CVE-2006-5097

CVE-2006-5097 concerns net2ftp (version range ~0.1–0.62) and a PHP remote file inclusion in index.php via the application_rootdir parameter, potentially allowing arbitrary PHP code execution. The vulnerability is linked to this parameter, but it has been disputed by a third‑party researcher and b...

PT-2006-5835 · Net2Ftp · Net2Ftp

Name of the Vulnerable Software and Affected Versions: net2ftp versions 0.1 through 0.62 Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code via a URL in the application rootdir parameter. However, this issue has been disputed by a...

net2ftp: a web based FTP client :&#41; &lt;= Remote File Inclusion

+-------------------------------------------------------------------- + + net2ftp: a web based FTP client : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: net2ftp: a web based FTP client + Venedor ...........:...