Directory traversal

Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsOptionpagetype parameter to the default URI for modules/news/. NOTE: this can be leveraged by using legitimate product...

CVE-2007-6079

Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsOptionpagetype parameter to the default URI for modules/news/. NOTE: this can be leveraged by using legitimate product...

Moving-2 0 0 6 file upload vulnerability principle and the attack implemented-vulnerability warning-the black bar safety net

Preface: This article is only to let everyone know about this vulnerability, please do not attack others! Action-the recent explosion of a vulnerability, much noise uproar, a lot of big stations have hung up. The use of 2 0 0 3 year of a vulnerability, the very old, in front of a burst of...

logahead UNU edition 1.0 Remote Upload File / Code Execution Vuln

Exploit for unknown platform in category web applications...

Beware of being black with caution eWebEditor online editor-vulnerability warning-the black bar safety net

Network popular the website is news, forums, e-Mall as well as the blog. These systems will be required to have set the text size, color and insert images and other functions, so on the network there is a corresponding third-party functional components to complete the corresponding function, such...

CVE-2006-3070: Undefined Security Weakness

writeok.php in Zeroboard 4.1 pl8, when installed on Apache with modmime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file that with an AddType directive that assigns an executable module to files with assumed-safe...

eWebEditor: the website of the invisible bomb-vulnerability warning-the black bar safety net

Bit webmasters in using the eWebEditor is found, eWebEditor improperly configured so that it will become the site of the Unabomber? First found thisvulnerabilityfrom last year's invasion, in the dead end of the time to find out eWebEditor, so it is simple to get a WebShell in. Subsequently, sever...

Subdreamer 2.2.1 - SQL Injection Command Execution

Subdreamer 2.2.1 - SQL Injection Command Execution !/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2...

CVE-2004-0614: Undefined Security Weakness

osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size...

hpjadmadv.txt

Product: HP Web JetAdmin Version 7.5.2546 Others that use this codebase assumed vulnerable Note: Only tested on the Windows Platform. Vulnerability: Denial of Service, Upload Any file to the filesystem to a known location, Write to any file on the file system, Read any file from the filesystem...

CVE-2002-1038: Undefined Security Weakness

Double Choco Latte DCL before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the 1 Projects: Upload File Attachment or 2 Work Orders: Import features...