[Full-disclosure] DMA[2006-0112a] - 'Toshiba Bluetooth Stack Directory Transversal'

DMA2006-0112a - 'Toshiba Bluetooth Stack Directory Transversal' Author: Kevin Finisterre Vendor: http://www.toshiba-tro.de/ Product: 'Toshiba Bluetooth Stack =v4.00.23T' References: http://www.digitalmunition.com/DMA2006-0112a.txt Description: Toshiba was one of the first companies to provide a...

[Full-disclosure] Rockliffe Directory Transversal Vulnerability

Synopsis: Rockliffe's Mailsite Imap Directory Transversal Vulnerability. Product: Rockliffe Mailsite http://www.rockliffe.com Version: Confirmed on Mailsite 6.1.22.1 Author: Josh Zlatin-Amishav Date: January 4, 2006 Background: Rockliffe MailSite secure email server software and MailSite MP secur...

guppyTraverse.txt

BID 14752 is not only an XSS vulnerability, the real problem is a directory transversal flaw and affects Guppy versions less than 4.5.6a. PoC works for versions alertXSS" you receive an error that PHP can't include the file and the javascript gets executed. This assumes registerglobals and...

PayProCart30.txt

This is a multi-part message in MIME format. ------=NextPart000000601C5395C.BF487B20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/...

Authenticaion bypass, Directory transversal and XSS vulnerabilities in PayProCart 3.0 - Profitcode Software

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity...

- Argeniss - Oracle Database Server Directory transversal

Argeniss Security Advisory Name: Oracle Database Server Directory transversal Affected Software: Oracle Database Server versions 8i and 9i Severity : Medium Remote exploitable: Yes Authentication to Database Server is needed Credits: Cesar Cerrudo Date: 03/07/05 Advisory Number: ARG030501 Details...

[Full-Disclosure] WinHKI - BH File Directory Transversal

Application: WinHKI Vendors: http://www.webtoolmaster.com Versions: 1.4d Platforms: Windows Bug: BH File Directory Transversal Exploitation: Local extract file Date: 24 Dec 2004 Author: Rafel Ivgi, The-Insider E-Mail: [email protected] Website: http://theinsider.deep-ice.com 1 Introduction 2 Bu...

EZshopper Directory Transversal in loadpage.cgi

Exploit for cgi platform in category web applications =============================================== EZshopper Directory Transversal in loadpage.cgi =============================================== Example: http://targethost/cgi-bin/loadpage.cgi?userid=id&file=.|./.|./.|./.|./.|./etc/passwd%00.ht...

PhotoPost PHP Pro Multiple Vulnerabilities

Executive Overview ------------------ Cloisterblog, a general usage web blog written in perl suffers from multiple XSS and directory transversal issues as well as a design flaw in the admin section. Program Description -------------------- Cloisterblog...

VocalTec Gateway 8 Reverse Directory Transversal + Authorization Bypass

Application VocalTec Gateway Vendors: http://www.vocaltec.com Versions: 8 Platforms: Windows Bug: Reverse Directory Transversal + Authorization Bypass Risk: High Exploitation: Remote with browser Date: 14 Mar 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...

PHP Manpage lookup directory transversal / file disclosing

Hi ppl, Manpage Lookup is a PHP class that helps you to build a "manpage" frontend in php. It is powered by Andy http://php.amnuts.com. The script class.manpagelookup.php was vulnerable to a directory transversal bug because of leaks is input validation that could lead to disclose any readable by...

manpage.txt

Hi ppl, Manpage Lookup is a PHP class that helps you to build a "manpage" frontend in php. It is powered by Andy http://php.amnuts.com. The script class.manpagelookup.php was vulnerable to a directory transversal bug because of leaks is input validation that could lead to disclose any readable by...

One more flaw in Happymall

Happymall E-Commerce Directory Transversal Bug and Cross-site scripting Vendor: Happycgi.com Product: Happymall Versions: 4.3, 4.4 patched version too 'normalhtml.cgi' doesn't filter user-supplied input. The well-known directory transversal and cross-site scripting XSS vulnerabilities are present...

Gafware's CFXImage vulnerability

Procheckup Ltd www.procheckup.com Procheckup Security Bulletin PR02-12 Description: Gafware's CFXImage showtemp program file reading vulnerability Date: 23/5/2002 Vulnerable OS: Microsoft Windows. Not Vulnerable OS: N/A Platform: Microsoft Windows. Severity: Anonymous attackers can read any files...

Remote File Attachment Theft via comm.lycos.com,angelfire.com, eudoramail.com

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Date Published: November 28, 2000 Title: Remote File Attachment Theft via comm.lycos.com,angelfire.com, eudoramail.com Class: Access Validation Error Remotely Exploitable: Yes Vulnerability Description: WebMail possibly WhoWhere.com software as...

Securax-SA-09.serv-u

===================================================================== Securax-SA-09 Security Advisory belgian.networking.security Dutch ===================================================================== Topic: Catsoft serv-U FTP Directory Transversal Vulnerability Announced: 2000-12-03 Updated...

MS Windows IIS Unicode Remote Transversal Bug

Exploit for unknown platform in category remote exploits ============================================= MS Windows IIS Unicode Remote Transversal Bug ============================================= / iisex iis exploit grtz to: Bio, nos, zoa, reg and vor... who else would stay up at night to exploit...

MS Windows IIS Unicode Remote Transversal Bug (3)

Exploit for unknown platform in category remote exploits ================================================= MS Windows IIS Unicode Remote Transversal Bug 3 ================================================= !/usr/bin/perl IIS 4.0/5.0 Unicode Exploit Checks for each script that has been posted on th...

Extent RBS directory Transversal.

Advisory Title: Extent RBS directory Transversal. Release Date: 09/21/2000 Application: Extent RBS Platform: Windows NT4 Windows 2000 RedHat Linux 6.x Sun Solaris 2.6+ Version: 2.63. Possibly older versions as well. have also tested 2.5 and found it vulnerable Severity: Any user can get any file ...