Directory traversal

Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action...

CVE-2008-4426

Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...

CVE-2008-4427

changepassword.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords...

CVE-2008-4426

Phlatline's Personal Information Manager (pPIM) 1.0 contains a Cross-site Scripting (XSS) vulnerability in events.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action. This is documented under CVE-2008-4426; multiple connected sources...

VBA32 Personal Antivirus 3.12.8.x (malformed archive) DoS Exploit

Exploit for unknown platform in category dos / poc ================================================================= VBA32 Personal Antivirus 3.12.8.x malformed archive DoS Exploit =================================================================...

CVE-2008-4428: Improper Input Validation

Unrestricted file upload vulnerability in upload.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in the top-level directory...

VBA32 Personal AntiVirus 3.12.8.x - Malformed Archive Denial of Service

VBA32 Personal AntiVirus 3.12.8.x - Malformed Archive Denial of Service ------------------------------------------------------------------------------------------------------------------------------ VBA32 Personal Antivirus 3.12.8.x malformed archive Denial of Service PoC Summary: Antivirus progr...

CVE-2008-4426: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...

VBA32 Personal Antivirus 3.12.8.x (malformed archive) DoS Exploit

No description provided by source. ------------------------------------------------------------------------------------------------------------------------------ VBA32 Personal Antivirus 3.12.8.x malformed archive Denial of Service PoC Summary: Antivirus program for personal computers running...

CVE-2008-4425: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in upload.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to delete arbitrary files via directory traversal sequences in the file parameter within a delfile action...

VBA32 Personal Antivirus 3.12.8.x (malformed archive) DoS Exploit

Summary Antivirus program for personal computers running Windows which is a reliable and, it is crucial, quick tool to detect and neutralize computer viruses, mail worms, trojan programs and other malware backdoors, adware, spyware, etc in real time and by request. Description Vba32 Personal...

CVE-2008-4427: Improper Authentication

changepassword.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords...

VBA32 Personal AntiVirus 3.12.8.x - Malformed Archive Denial of Service

------------------------------------------------------------------------------------------------------------------------------ VBA32 Personal Antivirus 3.12.8.x malformed archive Denial of Service PoC Summary: Antivirus program for personal computers running Windows which is a reliable and, it is...

CVE-2008-4136

Michael Roth Software Personal FTP Server PFT 6.0f allows remote attackers to cause a denial of service service crash via multiple RETR commands, possibly involving long filenames...

CVE-2008-4136

Michael Roth Software Personal FTP Server PFT 6.0f allows remote attackers to cause a denial of service service crash via multiple RETR commands, possibly involving long filenames...

CVE-2008-4136: Improper Input Validation

Michael Roth Software Personal FTP Server PFT 6.0f allows remote attackers to cause a denial of service service crash via multiple RETR commands, possibly involving long filenames...

Personal FTP Server 'RETR'命令远程拒绝服务漏洞

BUGTRAQ ID: 31173 CNCAN ID：CNCAN-2008091607 Personal FTP Server是一款FTP服务程序。 Personal FTP Server处理'RETR'命令存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 提交包含超长文件名作为'RETR'命令参数，可触发缓冲区溢出，精心构建提交数据可能以应用程序权限执行任意指令。 Michael Roth Software Personal FTP Server 6.0f 目前没有解决方案提供: http://www.michael-roth-software.de/ / The...

The Personal FTP Server 6.0f RETR Denial of Service Exploit

No description provided by source. / The Personal FTP Server 6.0f RETR DOS exploit A vulnerability exists in the way Personal FTP Server handles multiple RETR commands with overly long filenames.When confronted with such consecutive requests the server will crash. Usage : ./pftpdos ip port user...

personalftp-dos.txt

/ The Personal FTP Server 6.0f RETR DOS exploit A vulnerability exists in the way Personal FTP Server handles multiple RETR commands with overly long filenames.When confronted with such consecutive requests the server will crash. Usage : ./pftpdos ip port user password Ex. : ./pftpdos 127.0.0.1 2...

The Personal FTP Server 6.0f RETR Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== The Personal FTP Server 6.0f RETR Denial of Service Exploit =========================================================== / The Personal FTP Server 6.0f RETR DOS exploit A vulnerability...