elron im anti-virus 3.0.3 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2519/info Elron IM is a suite of tools providing internet filtering, virus protection, and other features. Certain non-current versions of products in the Internet Manager suite, including IM Anti-Virus, are vulnerable to...

Joomla! Component com_rwcards - Local File Inclusion

Author : altbta [email protected] Team : Sec Attack Team Home : www.v4-team.com/cc Script : Joomla Component comrwcards Bug Type : Local File Inclusion LFI Dork : inurl:"comrwcards" === Exploit === http://site/index.php?option=comrwcards&view=rwcards&controller=LFI...

Joomla Dashboard Directory Traversal

@=======================================@ @=Script : Joomla Component comdashboard @=Author : FL0RiX @=Greez : Dost mu var? @=Bug Type : Directory Traversal @=Dork : inurl:"comdashboard" @=Note: Kimseye Hakettiginden Fazla Deger Vermeyeceksin. @=======================================@ @=Vuln. :...

OneCMS 2.5 (install_mod.php) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: OneCMS Versions Affected: 2.5 Vendor URL: http://www.insanevisions.com/ Bug: Local File Include Exploits: YES Reported: 26.03.2008 Vendor Response: NONE Solution: NONE Date of Public...

Gaming Directory 1.0 (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Gaming Directory 1.0 catid Remote SQL Injection Vulnerability ================================================================...

GetBlog local File inclusion ..

Hello,, GetBlog local File inclusion .. http://sourceforge.net/projects/geblog Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Exploit : - tpl/Default/index.php?tplname=../../../../../../../etc/passwd00 WwW.SoQoR.NeT...

FireConfig 0.5 (dl.php file) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================= FireConfig 0.5 dl.php file Remote File Disclosure Vulnerability ================================================================= FireConfig v0.5 dl.php file Remote File...

Subversion (SVN) < 1.4.5 Directory Traversal Privilege Escalation (deprecated)

Binary data 4198.prm...

MTools 3.9.x - 'MFormat' Local Privilege Escalation

source: https://www.securityfocus.com/bid/9746/info It has been reported that mformat is prone to a privilege escalation vulnerability when installed as a setUID application. This issue is due to a design error allowing a user to create any arbitrary files as the root user. A local attacker could...

Fools Workshop Owls Workshop 1.0 - resultsignore.php Arbitrary File Access

Fools Workshop Owls Workshop 1.0 - resultsignore.php Arbitrary File Access source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI...

Fool's Workshop Owl's Workshop 1.0 - '/glossaries/index.php?File' Arbitrary File Access

source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...

Fool's Workshop Owl's Workshop 1.0 - 'newmultiplechoice.php' Arbitrary File Access

source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...

Fool's Workshop Owl's Workshop 1.0 - 'multiplechoice/index.php' Arbitrary File Access

source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...

Fool's Workshop Owl's Workshop 1.0 - 'resultsignore.php' Arbitrary File Access

source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...

ShopCartCGI 2.3 - 'gotopage.cgi' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful exploitation of this issue an attacker may be able to gain access to...

ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access

ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful...

ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful exploitation of this issue an attacker may be able to gain access to...

Happymall E-Commerce Software 4.3/4.4 - 'Normal_HTML.cgi' File Disclosure

source: https://www.securityfocus.com/bid/7559/info IT has been reported that Happymall E-Commerce is prone to a file disclosure vulnerability. The problem occurs due to insufficient sanitization of user-supplied URI parameters. As a result, it may be possible for an attacker to view the contents...

Happymall E-Commerce Software 4.34.4 - Normal_HTML.cgi File Disclosure

Happymall E-Commerce Software 4.34.4 - NormalHTML.cgi File Disclosure source: https://www.securityfocus.com/bid/7559/info IT has been reported that Happymall E-Commerce is prone to a file disclosure vulnerability. The problem occurs due to insufficient sanitization of user-supplied URI parameters...

MySQL 3.20.32 a/3.23.34 - Root Operation Symbolic Link File Overwriting

source: https://www.securityfocus.com/bid/2522/info MySQL is a relational database management system RDBMS, freely available and open source. It is maintained by MySQL AB. A problem with the implementation of some MySQL databases may permit local users to overwrite sensitive system files. This...