5129 matches found
CVE-2004-0293
Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. dot dot in a HTTP request to 1 gotopage.cgi or 2 genindexpage.cgi...
[Full-Disclosure] 3COM 3crwe754g72-a Information Disclosure, Logs manipulation ...
Title: 3com 3crwe754g72-a Information Disclosure Class: Design Error Affects: 3com 3crwe754g72-a v 1.11 v 1.13 v 1.24 Id: cbsa-0000 Release Date: 2004 10 18 Author : Cyrille Barthelemy [email protected] -- 1. Introduction ------------------ 3Com 3crwe754g72-a is a bundle product which...
Samba MS-DOS Path Request Arbitrary File Retrieval
According to its version number, the remote Samba server is affected by a flaw that allows an attacker to access arbitrary files which exist outside of the shares's defined path. An attacker needs a valid account to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...
Serendipity 0.7-beta1 SQL Injection Proof of Concept
Exploit for unknown platform in category web applications ==================================================== Serendipity 0.7-beta1 SQL Injection Proof of Concept ==================================================== Proof of Concept 1 ------------------ Usage: ./sersqlipoc.sh...
Parachat 5.5 - Directory Traversal
source: https://www.securityfocus.com/bid/11272/info It is reported that ParaChat is susceptible to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input data. This vulnerability allows remote attackers to retrieve the...
S9Y Serendipity 0.7-beta1 - SQL Injection
S9Y Serendipity 0.7-beta1 - SQL Injection Proof of Concept 1 ------------------ Usage: ./sersqlipoc.sh URLtoSerendipityWeblog sersqlipoc.sh ---------8-----------8------------- !/bin/sh echo -n "Username: " curl -I -s...
TorrentTrader 1.0 RC2 - SQL Injection
!/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS acidbitsathotmail.com 31-August-2004 "TorrentTrader http://www.torrenttrader.com/ is a feature packed and highly customisable open-source BitTorrent tracker." This PoC dumps the username and password's md5 hash of...
Keene Digital Media Server 1.0.2 - Directory Traversal
Keene Digital Media Server 1.0.2 - Directory Traversal source: https://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using he...
MusicDaemon unauthorized access
It's possible to obtain any file remotely...
Web-APP.Org WebAPP 0.80.9.x - Directory Traversal
Web-APP.Org WebAPP 0.80.9.x - Directory Traversal source: https://www.securityfocus.com/bid/11028/info WebAPP is reported prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input data. An attacker can exploit this vulnerability to retriev...
Stalkerlab Mailers CGIMail.exe Arbitrary File Retrieval
Binary data 1626.prm...
CVS < 1.11.15 / 1.12.7 Client Traversal Arbitrary File Retrieval
Binary data 1219.prm...
PKCS#1 Version 1.5 Session Key Retrieval
Binary data 1971.prm...
BNBForm bnbform.cgi Automessage Arbitrary File Retrieval
Binary data 1643.prm...
CVE-2004-0412
Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server...
[Full-Disclosure] Clear text password exposure in Datakey's tokens and smartcards
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Clear text password exposure in Datakey's tokens and smartcards Classification: =============== Level: LOW-med-high-crit ID: HEXVIEW200408031 Overview: ========= Datakey http://www.datakey.com delivers smartcard and token-based authentication and...
popfile file disclosure
John Graham-Cumming reports that certain configurations of POPFile may allow the retrieval of any files with the extensions .gif, .png, .ico, .css, as well as some files with the extension .html...
Mandrake Linux Security Advisory : mailman (MDKSA-2004:051)
Mailman versions = 2.1 have an issue where 3rd parties can retrieve member passwords from the server. The updated packages have a patch backported from 2.1.5 to correct the issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
ew_file_manager.txt
CIRT-200404: EasyWeb EW FileManager Directory Traversal Remote File Retrieval - 07/23/2004 Product: EasyWeb FileManager Module Description: EasyWeb FileManager Module for PostNuke is vulnerable to a directory traversal problem which allows retrieval of arbitrary files from the remote system...
EasyWeb FileManager Directory Traversal
Product: EasyWeb FileManager Module - http://home.postnuke.ru/index.php Description: EasyWeb FileManager Module for PostNuke is vulnerable to a directory traversal problem which allows retrieval of arbitrary files from the remote system. Systems Affected: EasyWeb FileManager 1.0 RC-1 Technical...