AlstraSoftRFI.txt

NightWarrior nightwarrior-athotmail.com AlstraSoft Video Share Enterprise Remote File Include Vulnerability Contact : nightwarrior-athotmail.com hompage : www.alstrasoft.com vuln code : myajaxphp.php line 11 requireonce$config'BASEDIR' . "/ajax/cpaint2.inc.php"; http://www.example.com/Script...

Cybozu Products - 'id' Arbitrary File Retrieval

Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Chew Keong Release Date: 2006-08-28 Summary A vulnerability has been found in Cybozu Products. When exploited, the vulnerability allows an authenticated user to retrieve arbitrary files accessible to the web server process. Tested...

Alstrasoft Video Share Enterprise 4.x - 'MyajaxPHP.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code an...

Alstrasoft Video Share Enterprise 4.x - MyajaxPHP.php Remote File Inclusion

Alstrasoft Video Share Enterprise 4.x - MyajaxPHP.php Remote File Inclusion source: https://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit thi...

GLSA-200607-10 : Samba: Denial of Service vulnerability

The remote host is affected by the vulnerability described in GLSA-200607-10 Samba: Denial of Service vulnerability During an internal audit the Samba team discovered that a flaw in the way Samba stores share connection requests could lead to a Denial of Service. Impact : By sending a large amoun...

security flaw

The smdb daemon smbd/service.c in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service memory consumption via a large number of share connection requests...

Samba: Denial of Service vulnerability

Background Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. Description During an internal audit the Samba team discovered that a flaw in the way Samba stores share connection requests could lead to a...

CVE-2006-3403

The smdb daemon smbd/service.c in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service memory consumption via a large number of share connection requests...

DEBIAN-CVE-2006-3403

The smdb daemon smbd/service.c in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service memory consumption via a large number of share connection requests...

CVE-2006-3403

The smdb daemon smbd/service.c in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service memory consumption via a large number of share connection requests...

Samba file server DoS

Memory exhaustion in smbd by issuing large number of share connection requests...

CVE-2006-3281

CVE-2006-3281 : A remote code execution flaw in Windows Explorer/Internet Explorer 6 related to handling of Drag & Drop with CLSID extensions (Folder GUID Code Execution). Root cause: improper handling of directories/CLSID extensions can lead to arbitrary code execution when a user visits a craft...

CVE-2006-3281: Improper Input Validation

Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attackers to execute arbitrary code via a link to an SMB file share with a filename that contains encoded ..\ %2e%2e%5c sequences and whose extension contains the CLSID Key identifier...

Directory traversal

Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to include arbitrary local files and execute arbitrary PHP code via the hubdir parameter, as demonstrated by including accesslog. NOTE: in some cases, arbitrary remot...

Path traversal

Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter, and possibly remote files using UNC share pathnames...

CVE-2006-0873

CVE-2006-0873 affects Coppermine Photo Gallery (docs/showdoc.php, f parameter). It is an absolute path traversal / local file inclusion vulnerability allowing arbitrary file inclusion, potentially from Windows UNC shares. Affected: Coppermine Photo Gallery 1.4.3 and earlier. Root cause: unsanitiz...

CVE-2006-0786

The CVE-2006-0786 entry concerns PHP-Kit prior to 1.6.1 Release 2, where include.php contains an incomplete blacklist vulnerability. When allow_url_fopen is enabled, an attacker can perform PHP remote file include attacks by passing a path parameter that points to a (1) UNC share or (2) ftps URL,...

CVE-2006-0786: Undefined Security Weakness

Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allowurlfopen enabled, allows remote attackers to conduct PHP remote file include attacks via a path parameter that specifies a 1 UNC share or 2 ftps URL, which bypasses the check for "http://", "ftp://"...

In the WEBSHELL, the clever use of file sharing to perform system commands-bug warning-the black bar safety net

Recently in the invasion of Win2003 when found default case not use the system comes with the cmd. exe files to execute system commands, upload the cmd. exe file because the file is too big to fail, then I pass a station adjacent to the machine's file share successfully upload the cmd. exe file,...

PaQFile_Share.txt

eFileGo 3.01 Multiple Vulnerabilities Severity: Critical Date of release: 31/12/2005 Product url: http://www.paqtool.com/download.html Description: A file share http server. Safely as p2p software, no client needed. You friend can download file from your computer by internet browser quickly. This...