MediaInSpot CMS - Local File Inclusion (1)

Title : MediaInSpot CMS LFI Vulnerability Author: Amoo Arash Date : 2010-04-10 InformatioN Title : MediaInSpot CMS LFI Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/view/lang/index.php?page=?page=LFI ExploiT : ../../../../../../../etc/passwd Example :...

cfm local include exploit-vulnerability warning-the black bar safety net

1.读取metabase.xml/web.xml /password. properities sensitive files,know the www path,coldfusion,coldfusion backend encrypted password ! 2. Local contains the coldfusion logs,write cfm in a word,get a WEBSHELL...

XMail Insecure Temporary File Creation Vulnerability

XMail creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete...

rar. exe at the mention of the right in the magical-vulnerability warning-the black bar safety net

3est rar. exe is? It is the famous winrar comes with a command line unzip program. At the mention of the right in the US is often todownloada variety of sensitive files, such as:SU directory. You think about it, if the su catalog file so much, do you want onedownload is?? This obviously is very...

Design/Logic Flaw

freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory /var/db/freebsd-update by default, which allows local users to read copies of sensitive files after a 1 freebsd-update fetch fetch or 2 freebsd-update upgrade upgrade operation...

CVE-2009-4358

freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory /var/db/freebsd-update by default, which allows local users to read copies of sensitive files after a 1 freebsd-update fetch fetch or 2 freebsd-update upgrade upgrade operation...

BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability

This host has BackupPC intallation and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbbackuppcclientnamealiassecbypassvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability Authors: Sharath S Copyright: Copyrigh...

BackupPC 'ClientNameAlias' Function Security Bypass Vulnerability

BackupPC is prone to a security bypass vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2009-3369

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

CVE-2009-3369

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

Design/Logic Flaw

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

CVE-2009-3369

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

CVE-2009-3369

CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then...

PT-2009-5676

Name of the Vulnerable Software and Affected Versions: BackupPC version 3.1.0 Description: The issue allows remote authenticated users to read and write sensitive files by modifying the ClientNameAlias function to match another system and then initiating a backup or restore. This is possible when...

CVE-2009-3110

Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does...

American Airlines Local File Inclusion

American Airlines' domains have been vulnerable to Local file Include I wonder if anyone has flown free using this http://www.aa.com.do/aa/i18nForward.do?p=../../../../../../../../../../../../../../../../../../../../../../../etc/passwd...

Ubuntu 8.10 / 9.04 : tomcat6 vulnerabilities (USN-788-1)

Iida Minehiko discovered that Tomcat did not properly normalise paths. A remote attacker could send specially crafted requests to the server and bypass security restrictions, gaining access to sensitive content. CVE-2008-5515 Yoshihito Fukuyama discovered that Tomcat did not properly handle error...

ZaoCMS (download.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================== ZaoCMS download.php Remote File Disclosure Vulnerability ========================================================== --------------------------------------------------------------...

NanoCMS '/data/pagesdata.txt' Password Hash Information Disclosure Vulnerability

NanoCMS is prone to an information disclosure vulnerability because it fails to validate access to sensitive files. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

TeamSpeak <= 2.0.23.17 Remote File Disclosure Vulnerability

No description provided by source. ?php // teamspeak server = 2.0.23.17 remote read file vulnerability // bug found and exploit write by c411k // http://www.heise-online.co.uk/security/Vulnerability-in-TeamSpeak-2-server--/news/93734 zazhali ploent svolo4i!! // tested on win ts2serverrc2202317,...