704 matches found
AtheOS 0.3.7 Change Root Relative Path Directory Escaping Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4051/info AtheOS is a freely available, open source operating system. It is distributed under the GPL, and maintained by the AtheOS project. It is possible to escape change rooted directories on AtheOS. Due to insufficien...
Angelo-emlak 1.0 - Database Disclosure Vulnerability
No description provided by source. !/usr/bin/env python -- coding:utf-8 -- import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class AngeloemlakDatabaseFoundPOCBase: vulID = '67229' version = '1' vulDate = '2010-04-27' author =...
Habari Blog Multiple Vulnerabilities
No description provided by source. Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure...
viscacha 0.8.1 - Multiple Vulnerabilities
No description provided by source. Vulnerability ID: HTB22921 Reference: http://www.htbridge.ch/advisory/sqlinjectioninviscacha.html Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Risk level...
ADA IMGSVR 0.4 - Remote File Download Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10027/info A vulnerability has been reported in the ImgSvr server software that may allow a remote user to the retrieve arbitrary files from the web server root directory and any subdirectories therein. An attacker may...
Solarwinds Storage Manager 5.1.0 - SQL Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
guido frassetto sedum http server 2.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2335/info A remote user could gain read access to known files outside of the root directory in a SEDUM HTTP Server. Requesting a specially crafted URL composed of '../' or '.../' sequences will disclose the requested file...
httpdx 1.5 'MKD' Command Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38242/info The 'httpdx' program is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an authenticated user to create directories outsi...
MyServer 0.4.1/0.4.2 HTTP Server Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7944/info The MyServer HTTP server is prone to a file disclosure vulnerability. Encoded directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are readabl...
Microsoft IIS 5.0 Indexed Directory Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1756/info If Index Server is enabled in Microsoft Internet Information Server 5.0, it is possible for a remote user to view the entire root directory structure and all sub-directories due to a flaw in the Web Distributed...
SurfControl SuperScout WebFilter for windows 2000 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5857/info SurfControl SuperScout WebFilter Reports Server is prone to a vulnerability which may allow remote attackers to disclose the contents of arbitrary files. The Reports Server does not sufficiently filter...
Joomla KISS Advertiser Remote File & Bypass Upload Vulnerability
No description provided by source. Exploit Title: Joomla comKSAdvertiser Remote File & Bypass Upload Vulnerability Google Dork: inurl:index.php?option=comksadvertiser Date: 12-07-2012 Author: Daniel Barragan D4NB4R Twitter: @D4NB4R site: http://www.insecurityperu.org/ vendor Link:...
Crob FTP Server 3.5.1 - Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9546/info A vulnerability has been reported in the Crob FTP server, which occurs due to a lack of validation of input from the user. By issuing a specially crafted request, a malevolent user may be able to gain access to...
PhpGedView 2.x Editconfig_gedcom.php Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9529/info It has been reported that PhpGedView may be prone to a directory traversal vulnerability that may allow a remote attacker to access files outside the server root directory. The problem exists due to insufficient...
TIPS MailPost 5.1.1 - Remote File Enumeration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11599/info TIPS MailPost is affected by a remote file enumeration vulnerability. This issue is due to a failure to properly sanitize user requests. An attacker may leverage this issue to gain knowledge of the existence of...
Working Resources BadBlue 1.2.7 Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2390/info Requesting a specially crafted URL to a machine running Working Resources BadBlue, will disclose the physical path to the root directory. http://target/ext.dll will result in: Error: opening c:\program...
netserve web server 1.0.7 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9059/info It has been reported that NetServe may be prone to a directory traversal vulnerability that may allow an attacker to gain access to sensitive information. The issue presents itself due to insufficient sanitizati...
MegaBrowser 0.3 HTTP Directory Traversal File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7802/info The MegaBrowser HTTP server component is prone to a file disclosure vulnerability. Directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are...
Hand-Crafted Software FreeProxy 3.5/3.6 - FreeWeb Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9388/info It has been reported that FreeWeb server of FreeProxy may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The issue may...
Kukol E.V. HTTP & FTP Server Suite 6.2 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8564/info The web server component of Kukol E.V. HTTP & FTP Server Suite is prone to a file disclosure vulnerability. Remote web users may use directory traversal sequences in requests to gain access to files outside of t...