4507 matches found
easyFilePwn.txt
/ =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users to grab files from the server without being authenticated...
Debian DSA-1033-1 : horde3 - several vulnerabilities
Several remote vulnerabilities have been discovered in the Horde web application framework, which may lead to the execution of arbitrary web script code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4190 Several Cross-Site-Scripting vulnerabiliti...
CVE-2006-4490
Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. dot dot sequence via the id parameter in 1 scripts/cbag/ag.exe or 2 scripts/s360v2/s360.exe...
CVE-2006-4490
Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. dot dot sequence via the id parameter in 1 scripts/cbag/ag.exe or 2 scripts/s360v2/s360.exe...
CVE-2006-4490
CVE-2006-4490 affects Cybozu Office (pre-6.6 Build 1.3) and Share 360 (pre-2.5 Build 0.3). Affected components allow directory traversal via the id parameter in scripts/cbag/ag.exe or scripts/s360v2/s360.exe, enabling remote authenticated users to read arbitrary files. Root cause: improper valida...
CVE-2006-4443
PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the configBASEDIR parameter...
CVE-2006-4443
PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the configBASEDIR parameter...
CVE-2006-4443
CVE-2006-4443 is a PHP remote file inclusion vulnerability in AlstraSoft Video Share Enterprise. The flaw exists in the file myajaxphp.php where the attacker can supply a URL via the config[BASE_DIR] parameter to cause arbitrary PHP code execution on the server. The NVD entry reports a base score...
AlstraSoft Video Share Enterprise Remote File Include Vulnerability
NightWarriorKurdish Hacker nightwarrior-athotmail.com AlstraSoft Video Share Enterprise Remote File Include Vulnerability Contact : nightwarrior-athotmail.com hompage : www.alstrasoft.com vuln code : myajaxphp.php line 11 requireonce$config'BASEDIR' . "/ajax/cpaint2.inc.php";...
AlstraSoftRFI.txt
NightWarrior nightwarrior-athotmail.com AlstraSoft Video Share Enterprise Remote File Include Vulnerability Contact : nightwarrior-athotmail.com hompage : www.alstrasoft.com vuln code : myajaxphp.php line 11 requireonce$config'BASEDIR' . "/ajax/cpaint2.inc.php"; http://www.example.com/Script...
Cybozu Products - 'id' Arbitrary File Retrieval
Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Chew Keong Release Date: 2006-08-28 Summary A vulnerability has been found in Cybozu Products. When exploited, the vulnerability allows an authenticated user to retrieve arbitrary files accessible to the web server process. Tested...
Alstrasoft Video Share Enterprise 4.x - MyajaxPHP.php Remote File Inclusion
Alstrasoft Video Share Enterprise 4.x - MyajaxPHP.php Remote File Inclusion source: https://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit thi...
Alstrasoft Video Share Enterprise 4.x - 'MyajaxPHP.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code an...
GLSA-200607-10 : Samba: Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200607-10 Samba: Denial of Service vulnerability During an internal audit the Samba team discovered that a flaw in the way Samba stores share connection requests could lead to a Denial of Service. Impact : By sending a large amoun...
security flaw
The smdb daemon smbd/service.c in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service memory consumption via a large number of share connection requests...
Samba: Denial of Service vulnerability
Background Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. Description During an internal audit the Samba team discovered that a flaw in the way Samba stores share connection requests could lead to a...
DEBIAN-CVE-2006-3403
The smdb daemon smbd/service.c in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service memory consumption via a large number of share connection requests...
CVE-2006-3403
The smdb daemon smbd/service.c in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service memory consumption via a large number of share connection requests...