Globsy 1.0 (file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================== Globsy 1.0 file Remote File Disclosure Vulnerability ====================================================== Globsy 1.0 file Remote File Disclosure Vulnerability...

truc-disclose.txt

TRUC 0.11.0 download.php Remote File Disclosure Vulnerability http://switch.dl.sourceforge.net/sourceforge/truc/truc0.11.0.tar.gz POC : /download.php?uploadfilename=configinc.php /download.php?uploadfilename=../../../../../../../../etc/passwd Dork : TRUC 0.11.0 :: © 2006 by ASDIS : I'm TRYAGI ; -...

Shop-Script 2.0 index.php Remote File Disclosure Vulnerability

No description provided by source. Shop-Script 2.0 index.php Remote File Disclosure Vuln Script:Shop-Script 2.0 Download : ?? AUTHOR :Fisher762 From S.M.A TEAM Contact Me: [email protected] HOME : http://www.v99x.com/vb DorKs :" Shop-Script 2.0. All rights reserved" EXPLOIT :...

Uebimiau Web-Mail 2.7.10/2.7.2 Remote File Disclosure Vulnerability

No description provided by source. ---- Uebimiau Web-Mail Remote File Reader ... ITDefence.ru Antichat.ru Uebimiau Web-Mail Remote File Reader Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /...

Upload directory traversal in Easy File Sharing 4.5

Luigi Auriemma Application: Easy File Sharing Web Server http://www.sharing-file.com Versions: = 4.5 Platforms: Windows Bugs: A upload directory traversal B download of database files C possibility of reading sensitive files Exploitation: remote Date: 07 Dec 2007 Author: Luigi Auriemma e-mail:...

wppict-disclose.txt

Wordpress Plugin PictPress = release0.91 Remote File Disclosure Vulnerability D.Script : http://downloads.wordpress.org/plugin/pictpress.release-0.91.zip Vuln Code : In Line 5,6,7,8 : $path = $GET'path'; $size = $GET'size'; $base = dirnameFILE . "/.."; $cache = "$base/cache/$size/$path"; In Line ...

ezContents Version 1.4.5 Remote File Disclosure Vulnerability.

-------------------------------------------------------------- ezContents Version 1.4.5 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://www.visualshapers.com/ author : p4imi0 contact : [email protected] exploit :...

Directory Traversal in SafeNet Sentinel Protection Server and Keys Server

SUMMARY ======= SafeNet Inc.'s Sentinel Protection Server and Sentinel Keys Server products include web servers which are vulnerable to directory traversal attacks. A remote attacker could exploit these vulnerabilities to read arbitrary files with the permissions of the web server, typically...

sentineldetails-traverse.txt

SUMMARY ======= SafeNet Inc.'s Sentinel Protection Server and Sentinel Keys Server products include web servers which are vulnerable to directory traversal attacks. A remote attacker could exploit these vulnerabilities to read arbitrary files with the permissions of the web server, typically...

CVE-2007-5473

StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing 1 space or 2 dot, which is not properly handled by XSP...

Code injection

libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...

CVE-2007-3024

libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...

CVE-2007-3024

libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...

SOL7397 - Download of local FirePass files using the URL in Webtop or the Admin UI

A vulnerability exists that allows an authenticated FirePass user to download files from the filesystem of a FirePass controller. In order to download a file, the user must first log in to the FirePass controller webtop or the Admin UI, and type a specially crafted URL into their web browser. Thi...

Pagode 0.5.8 (navigator_ok.php asolute) Remote File Disclosure Vuln

No description provided by source. Pagode 0.5.8navigatorok.php asoluteRemote File Disclosure D.Script:http://belnet.dl.sourceforge.net/sourceforge/pagode/pagode-0.5.8.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc V.Code In /navigator/navigatorok.php:...

Microsoft Windows ReadDirectoryChangesW information leak

ReadDirectoryChangesW API function doesn't check user's privileges for subtree folders, making it's possible for unprivileged user to gather information about sensitive files...

Ezboo webstats acces to sensitive files

Ezboo webstats acces to sensitive files By : sn0oPy Risk : medium site : http://www.ezboo.com/softs exploit : juste add this files to the url : http://www.target.ma/ezwebstats/update.php http://www.target.ma/ezwebstats/config.php Dork : inurl:"/ezWebStats/" intitle:"ezBOO WebStats" contact :...

ezboo-bad.txt

Ezboo webstats acces to sensitive files By : sn0oPy Risk : medium site : http://www.ezboo.com/softs exploit : juste add this files to the url : http://www.target.ma/ezwebstats/update.php http://www.target.ma/ezwebstats/config.php Dork : inurl:"/ezWebStats/" intitle:"ezBOO WebStats" contact :...

nabopoll 1.2 Remote Unprotected Admin Section Vulnerability

Exploit for unknown platform in category web applications =========================================================== nabopoll 1.2 Remote Unprotected Admin Section Vulnerability =========================================================== nabopoll 1.1.2 sensitive file admin without password By :...

CVE-2007-0620

download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php...