Immunity Canvas: PODCASTGEN_INCLUDE

Name| podcastgeninclude ---|--- CVE| CVE-2008-1124 Exploit Pack| CANVAS Description| Podcast Generator = 1.0 BETA 2 remote file include Notes| CVE Name: CVE-2008-1124 VENDOR: podcastgen Repeatability: Infinite References: http://www.securityfocus.com/bid/28038 CVE Url:...

DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability

Title ----- DDIVRT-2008-10 PacketTrap PT360 Tool Suite TFTP Arbitrary File Access Severity -------- High Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: princeofnigeria and r@b13$ Date Discovered --------------- 1/29/2008 Vulnerability Description...

Immunity Canvas: PHPQLADMIN_INCLUDE

Name| phpqladmininclude ---|--- CVE| CVE-2008-1067 Exploit Pack| CANVAS Description| phpQLAdmin 2.2.7 Remote File Include Notes| CVE Name: CVE-2008-1067 VENDOR: phpQLAdmin.com Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/phpqladmin-rfi.txt.html CVE Url:...

Immunity Canvas: WPSNIPLETS_RFI

Name| wpsnipletsrfi ---|--- CVE| CVE-2008-1059 Exploit Pack| CANVAS Description| WordPress Plugin Sniplets 1.1.2 Remote File Include Notes| CVE Name: CVE-2008-1059 VENDOR: WordPress Repeatability: Infinite CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2008-1059 References: None CVSS: 7.5...

Immunity Canvas: WPSNIPLETS_EXEC

Name| wpsnipletsexec ---|--- CVE| CVE-2008-1060 Exploit Pack| CANVAS Description| Wordpress Plugin Sniplets 1.1.2 Remote Code Execution exploict Notes| CVE Name: CVE-2008-1060 VENDOR: WordPress Repeatability: Infinite References: http://seclists.org/bugtraq/2008/Feb/0402.html CVE Url:...

Immunity Canvas: QUINSONNAS_INCLUDE

Name| quinsonnasinclude ---|--- CVE| CVE-2008-1046 Exploit Pack| CANVAS Description| Quinsonnas Mail Checker 1.55 Remote File Inclusion Notes| CVE Name: CVE-2008-1046 VENDOR: Quinsonnas Repeatability: Infinite References: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1046 CVE Url:...

DSquare Exploit Pack: D2SEC_IPRINT

Name| d2seciprint ---|--- CVE| CVE-2008-0935 Exploit Pack| D2ExploitPack Description| Novell iPrint Client ienipp.ocx ActiveX Stack Overflow Notes|...

CVE-2008-0870

BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session...

Immunity Canvas: LOOKSTRIKE_INCLUDE

Name| lookstrikeinclude ---|--- CVE| CVE-2008-0803 Exploit Pack| CANVAS Description| LookStrike Lan Manager v0.9 Remote File Include Notes| CVE Name: CVE-2008-0803 VENDOR: LookStrike Repeatability: Infinite References: http://securityreason.com/exploitalert/3398 CVE Url:...

Immunity Canvas: NWSPOOL_C

Name| nwspoolc ---|--- CVE| CVE-2008-0639 Exploit Pack| CANVAS Description| Novell Netware Client for Windows Notes| CVE Name: CVE-2008-0639 VENDOR: Novell Notes: Use the setthreadtoken module to revert back to LocalSystem once the exploitation is successful Platforms Tested: References:...

Microsoft Office 2003 - .wps Local Stack Overflow (MS08-011)

Microsoft Office 2003 - .wps Local Stack Overflow MS08-011 / Copyright c 2008 chujwamwdupe - pumpernikiel.c one day in teletubby land... an email from idefense: "Unfortunately, Microsoft has refused to credit you using the name you requested." ...what's wrong with 'chujwamwdupe', eh? Description:...

Immunity Canvas: JOOMLAMOSDIRECTORY_INCLUDE

Name| joomlamosdirectoryinclude ---|--- CVE| CVE-2008-0690 Exploit Pack| CANVAS Description| Joomla mosDirectory Component Remote File Inclusion Notes| CVE Name: CVE-2008-0690 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/3098 CVE Url:...

DSquare Exploit Pack: D2SEC_FACEBOOK

Name| d2secfacebook ---|--- CVE| CVE-2008-0660 Exploit Pack| D2ExploitPack Description| Facebook Photo Uploader 4 ImageUploader4.1.ocx ActiveX Stack Overflow Notes|...

DSquare Exploit Pack: D2SEC_MYSPACE

Name| d2secmyspace ---|--- CVE| CVE-2008-0659 Exploit Pack| D2ExploitPack Description| MySpace Uploader MySpaceUploader.ocx ActiveX Stack Overflow Notes|...

Directory traversal

Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0609

Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0609

CVE-2008-0609 describes a directory traversal vulnerability in DivideConcept VHD Web Pack 2.0 (index.php) that allows remote attackers to include and execute arbitrary local files via .. in the page parameter. The NVD lists a base score of 7.5 (HIGH) with network access, low attack complexity, an...

CVE-2008-0609

Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

Immunity Canvas: JOOMLACHRONOFORMS_INCLUDE

Name| joomlachronoformsinclude ---|--- CVE| CVE-2008-0567 Exploit Pack| CANVAS Description| Joomla Chronoforms Component Remote File Inclusion Notes| CVE Name: CVE-2008-0567 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/3292 CVE Url:...

Immunity Canvas: MINDMELD_INCLUDE

Name| mindmeldinclude ---|--- CVE| CVE-2008-0572 Exploit Pack| CANVAS Description| Mindmeld remote file include Notes| CVE Name: CVE-2008-0572 VENDOR: Mindmeld Repeatability: Infinite References: http://www.securityfocus.com/bid/27538 CVE Url: https://vulners.com/cve/CVE-2008-0572 CVSS: 6.8...