Ewebeditor2.8.0最终版删除任意文件漏洞

eWebEditor是基于浏览器的、所见即所得的在线HTML编辑器。她能够在网页上实现许多桌面编辑软件（如：Word）所具有的强大可视编辑功能。WEB开发人员可以用她把传统的多行文本输入框TEXTAREA替换为可视化的富文本输入框，使最终用户可以可视化的发布HTML格式的网页内容。eWebEditor!已基本成为网站内容管理发布的必备工具！ 此漏洞存在于Example\NewsSystem目录下的delete.asp文件中，这是ewebeditor的测试页面，无须登陆可以直接进入，看这些代码： ‘ 把带”|”的字符串转为数组 Dim aSavePathFileName...

Ninja Blog 4.8 Information Disclosure

Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/index.php?s=ad&id=6 ---- Due to insufficient validation of client-side data, we can alter the path of files to be read to ...

Ninja Blog 4.8 Remote Information Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================== Ninja Blog 4.8 Remote Information Disclosure Vulnerability ========================================================== Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May...

Ninja Blog 4.8 Remote Information Disclosure Vulnerability

No description provided by source. Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/index.php?s=ad&id=6 ---- Due to insufficient validation of client-side data, we can alt...

Silentum Uploader 1.4.0 File Deletion

Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/advisories.php?id=2 ---- Due to insufficient validation of client-side data, we can alter the path of files to be...

Silentum Uploader 1.4.0 Remote File Deletion Exploit

Exploit for unknown platform in category web applications ==================================================== Silentum Uploader 1.4.0 Remote File Deletion Exploit ==================================================== Vendor: http://hypersilence.net Versions: Silentum Uploader 1.4.0 May also affec...

ReVou Twitter Clone Password Changer

=== NOTES === . Reset pwd, login as ADMIN, use this path to upload your php-shell-script: http://site.tld/revou/adminlogin/index.php?id=dbimport . your file is here: http://site.tld/revou/dbbackup/shell.php === GGL-DORKS === "Joined ReVou" "Tell the world what you're doing at this moment!" "days...

Portail Web Php <= 2.5.1.1 Multiple Inclusion Vulnerabilities

No description provided by source. Portail Web Php = 2.5.1.1 Multiple Remote/Local File Inclusion Vulnerabilities http://surfnet.dl.sourceforge.net/sourceforge/portail-web-php/PwP2.5.1.1.rar POC : I- Remote File Inclusion /PwP2.5.1.1/template/Vert/index.php?sitepath=http://localhost/020.txt...

scWiki 1.0 Beta 2 (common.php pathdot) Remote File Inclusion Vuln

No description provided by source. scWiki 1.0 Beta 2 common.php pathdot Remote File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/sc-wiki/scwikibeta2.zip POC : /includes/common.php?pathdot=Shell sebug.net...

CVE-2007-2412

The CVE-2007-2412 issue affects Seir Anphin, specifically the modules/file.php component. It describes a directory traversal vulnerability where an attacker can obtain sensitive information via the a[filepath] parameter by manipulating file paths with .. (dot dot). The core concern is that a user...

CVE-2005-3270

The CVE-2005-3270 entry concerns Symantec Norton AntiVirus 9.0.3 and a DiskMountNotify component. The vulnerability is an untrusted search path that allows local users to gain privileges by modifying the PATH to reference a malicious (1) ps or (2) grep file. This is a local privilege escalation i...

[SECURITY] [DSA 846-1] New cpio packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 846-1 [email protected] http://www.debian.org/security/ Martin Schulze October 7th, 2005 http://www.debian.org/security/faq -...

CVE-2005-0161

Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing 1 ../ sequences or 2 absolute pathnames...

[Full-Disclosure] unarj dir-transversal bug (../../../..)

yyoo wwaassssuupppp???????????????? ddoouubblleess iiss hheerree ttoo rroocckk ddaa hhoouussee nndd ttoo tthhrrooww uunnaarrjj ddiirr- - ttrraannssvveerrssaall bbuugg iinn yyaarr ffaaccee!! ''''uunnaarrjj ee'''' uunnppaacckkss aallll ddaa sshhiitt ttoo ddaa ccuurrrreenntt ddiirr ''''uunnaarrjj...

qnx-pppoed-multiple-flaws.txt

rfdslabs security advisory Title: QNX PPPoEd local root vulnerabilities RLSA01-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: 02 Sep 2004 Author: Julio Cesar Fort 1. Introduction PPPoEd daemon is used to provide a PPPoE connection, such as DSL, for QNX users. More...

[RLSA_01-2004] QNX PPPoEd local root vulnerabilities

rfdslabs security advisory Title: QNX PPPoEd local root vulnerabilities RLSA01-2004 Versions: QNX RTP 6.1 possibly others Vendor: http://www.qnx.com Date: 02 Sep 2004 Author: Julio Cesar Fort julio at rfdslabs com br 1. Introduction PPPoEd daemon is used to provide a PPPoE connection, such as DSL...

QNX PPPoEd 2.44.256.2 - Path Environment Variable Local Command Execution

QNX PPPoEd 2.44.256.2 - Path Environment Variable Local Command Execution source: https://www.securityfocus.com/bid/11105/info QNX PPoEd is reported prone to a problem that exists in the handling of paths to external executables that are employed by PPPoEd. Because of this, an attacker may be abl...

rsync directory traversal

It's possible to bypass directory traversal protection by adding few slashes into path...

DEBIAN-CVE-2004-0157

x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program...

safemode-adv-chitext.txt

================================================================== Safemode.org security advisory: CHITEX ================================================================== Introduction: ============= ChiTeX can be used to put Chinese Big5 codes in TeX/LaTeX documents. Operations with the ChiTeX...