Allow Site Admin to discover restricted pages

A customer mentioned that this functionality is important to have for automation and integration purposes. Currently confluence-administrators are not able to discover restricted pages, despite of their ability to access ie. read the page if they know the url. The customer argued that "this makes...

all forums.asp hack

this exploit have 500.000 site admin forums.asp hack content.asp?contenttype SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 2 : allinurl: "content.asp?contenttype" EXPLOIT 1:...

CVE-2007-2097

OpenConcept Back-End CMS 0.4.7 is affected by CVE-2007-2097, a set of PHP remote file inclusion vulnerabilities. The flaw allows an attacker to execute arbitrary PHP code by providing a URL in the includes_path parameter to multiple PHP files in htdocs/site-admin/ (and related files in htdocs/). ...

CVE-2007-0311

Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service application crash via a long SITE ADMIN command...

Command injection

Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service application crash via a long SITE ADMIN command...

WFTPD Server SITE ADMIN命令远程拒绝服务漏洞

WFTPD Server是一款FTP服务程序。 WFTPD Server处理SITE ADMIN命令存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交恶意字符串作为SITE ADMIN命令参数，可导致应用程序崩溃，造成拒绝服务攻击。 Texas Imperial Software WFTPD Pro 3.21 R2 Texas Imperial Software WFTPD Pro 3.21 R3 Texas Imperial Software WFTPD Pro 3.21 R1 Texas Imperial Software WFTPD Pro 3.21 Texas...

WFTPD服务器SITE ADMIN命令远程拒绝服务漏洞

WFTPD是Windows平台下的FTP服务程序。 WFTPD在处理带有超长畸形参数的SITE ADMIN命令时存在漏洞，远程攻击者可以通过发送畸形的命令导致服务器发生崩溃。 Texas Imperial Software WFTPD = 3.25 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wftpd.com/ / WFTPD server = 3.25 SITE ADMN DoS &nbsp...

WFTPD Pro FTP server DoS

Incomplete SITE ADMIN command causes server to crash...

PT-2003-1574 · Port80 · Iisprotect

Name of the Vulnerable Software and Affected Versions: iisPROTECT versions 2.2-r4 and earlier Description: The issue allows remote attackers to insert arbitrary SQL and execute code via certain variables, such as the GroupName variable in the SiteAdmin.ASP page. This can be exploited by attackers...