4354 matches found
Synergiser 1.2 RC1 - Local File Inclusion / Full Path Disclosure
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Synergiser...
Synergiser 1.2 RC1 - Local File Inclusion Full Path Disclosure
Synergiser 1.2 RC1 - Local File Inclusion Full Path Disclosure --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
Synergiser <= 1.2 RC1 Local File Inclusion & Full path disclosure
--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original here:...
Synergiser <= 1.2 RC1 Local File Inclusion / Full Path Disclosure
Exploit for unknown platform in category web applications ================================================================= Synergiser | |||| /| / / --------------------------------------------------------------- Synergiser = 1.2 RC1 Local File Inclusion & Full path disclosure Download:...
CVE-2007-5774
index.php in the File Manager module in Flatnuke 3 allows remote attackers to obtain sensitive information via an invalid argumentname parameter in a disc op action, which reveals the path in an error message...
syner-lfi.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original here: http://www.inj3ct-it.org/exploit/syner.txt...
SAXON version 5.4 Multiple Path Disclosure Vulnerabilities
netVigilance Security Advisory 53 SAXON version 5.4 Multiple Path Disclosure Vulnerabilities Description: SAXON is a simple accessible online news publishing system for personal and small corporate site owners. Publish news, using configurable templates, on any .php page on your site. Publish new...
Local File Inclusion and Information Leakage vulnerabilities in PHP-Nuke
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Local File Inclusion и Information Leakage уязвимостях в PHP-Nuke. Уязвимости в скриптах autohtml.php и autohtml0.php в параметре filename. Local File Inclusion: http://site/autohtml.php?filename=../file.php...
CVE-2003-1468
The WebLinks module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via an invalid cid parameter that is non-numeric or null, which leaks the pathname in an error message...
CVE-2003-1486
CVE-2003-1486 affects Phorum 3.4 to 3.4.2. An incorrect HTTP request to one of nine scripts (smileys.php, quick_listrss.php, purge.php, news.php, memberlist.php, forum_listrss.php, forum_list_rdf.php, forum_list.php, move.php) can make the server leak its full path in an error message. This is a ...
Flatnuke 3 Remote Command Execution / Privilege Escalation
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...
Flatnuke 3 - Remote Command Execution Privilege Escalation
Flatnuke 3 - Remote Command Execution Privilege Escalation --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
Flatnuke 3 Remote Command Execution / Privilege Escalation
Exploit for unknown platform in category web applications ========================================================== Flatnuke 3 Remote Command Execution / Privilege Escalation ========================================================== --------------------------------------------------------------...
flatnuke3-fm.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flatnuke 3...
Flatnuke3 File Manager Module - Unauthorized Access
Flatnuke3 File Manager Module - Unauthorized Access source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can...
Flatnuke3 File Manager Module - Unauthorized Access
source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can exploit this vulnerability to gain administrative contro...
CVE-2002-2288
CVE-2002-2288 affects Mambo Site Server 4.0.11. The vulnerability allows a remote attacker to disclose the server’s physical path by issuing an HTTP request to index.php containing a non-existent parameter, which triggers an error message revealing the path. No explicit remediation or patch detai...
CVE-2007-5444
CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files...
CVE-2007-5444
CMS Made Simple 1.1.3.1 is vulnerable to a path-disclosure issue: remote attackers can obtain the server’s full path by directly requesting unspecified files. This is a remote, unauthenticated weakness with partial confidentiality impact. No explicit fix/version is stated in the provided document...