20 matches found
nweb2fax <=0.2.7 - Local File Inclusion
nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via the id parameter submitted to comm.php and the varfilename parameter submitted to viewrq.php. id: CVE-2008-6668 info: name: nweb2fax =0.2.7 - Local File Inclusion author: geeknik severity: medium description: nweb2fax...
EUVD-2008-6631
Malware in sbrugna...
EUVD-2008-6630
Malware in sbrugna...
VulnCheck KEV: CVE-2008-6668
Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 id parameter to comm.php and 2 varfilename parameter to viewrq.php...
nweb2fax <= 0.2.7 - Multiple Vulnerabilities
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl nweb2fax = 0.2.7 Multiple Remote Vulnerabilities Script site: http://sourceforge.net/projects/nweb2fa...
Design/Logic Flaw
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the varfilename parameter in a 1 tif or 2 pdf format action...
CVE-2008-6669
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the varfilename parameter in a 1 tif or 2 pdf format action...
CVE-2008-6668
Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 id parameter to comm.php and 2 varfilename parameter to viewrq.php...
CVE-2008-6669
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the varfilename parameter in a 1 tif or 2 pdf format action...
CVE-2008-6668
The software nweb2fax version 0.2.7 and earlier is vulnerable to multiple directory traversal (CWE-22) vulnerabilities. Remote attackers can read arbitrary files by using the .. (dot dot) sequence in the id parameter of comm.php and the var_filename parameter of viewrq.php. Successful exploitatio...
CVE-2008-6669
The CVE-2008-6669 entry applies to viewrq.php in the nweb2fax project (version 0.2.7 and earlier). The vulnerability allows remote code execution through shell metacharacters in the var_filename parameter when performing (1) tif or (2) pdf format actions. The affected component is the server-side...
CVE-2008-6668
Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 id parameter to comm.php and 2 varfilename parameter to viewrq.php...
CVE-2008-6669: Improper Neutralization of Special Elements used in an OS Command
viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the varfilename parameter in a 1 tif or 2 pdf format action...
CVE-2008-6668: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 id parameter to comm.php and 2 varfilename parameter to viewrq.php...
nweb2fax <= 0.2.7 Multiple Remote Vulnerabilities
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl nweb2fax = 0.2.7 Multiple Remote Vulnerabilities Script site:...
nweb2fax-multi.txt
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl nweb2fax $line"; ... Arbitrary File Download Vulnerability :...
nweb2fax <= 0.2.7 Multiple Remote Vulnerabilities
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl nweb2fax = 0.2.7 Multiple Remote Vulnerabilities Script site:...
nweb2fax <= 0.2.7 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================= nweb2fax $line"; ... Arbitrary File Download Vulnerability : /viewrq.php?format=ps&varfilename=../../../../../../../../../../etc/passwd Bug: ... $varfilename=$GET'varfilename';...
nweb2fax 0.2.7 - Multiple Vulnerabilities
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl nweb2fax $line"; ... Arbitrary File Download Vulnerability :...
nweb2fax 0.2.7 - Multiple Vulnerabilities
nweb2fax 0.2.7 - Multiple Vulnerabilities :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl nweb2fax $line"; ... Arbitrary File Download Vulnerability :...