tomcat: unexpected file deletion in work directory

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename...

tomcat: unexpected file deletion and/or alteration

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

PsNews 1.3 - SQL Injection

PsNews 1.3 - SQL Injection Exploit Title : PsNews Sql Injection Vulnerability Date : 6 - 7 - 2010 Author : S.W.T Vendor : http://www.psnews.sourceforge.net Version : 1.3 Tested on : Linux & Windows Home : WwW.SeC-WaR.CoM -== SQL Injection Vulenrability ==-...

PsNews 1.3 SQL Injection

Exploit Title : PsNews Sql Injection Vulnerability Date : 6 - 7 - 2010 Author : S.W.T Vendor : http://www.psnews.sourceforge.net Version : 1.3 Tested on : Linux & Windows Home : WwW.SeC-WaR.CoM -== SQL Injection Vulenrability ==- http://www.site.com/path/ndetail.php?id=SQL1...

PsNews v1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================= PsNews v1.3 SQL Injection Vulnerability ======================================= Exploit Title : PsNews Sql Injection Vulnerability Date : 6 - 7 - 2010 Author : S.W.T Vendor :...

PsNews 1.3 - SQL Injection

Exploit Title : PsNews Sql Injection Vulnerability Date : 6 - 7 - 2010 Author : S.W.T Vendor : http://www.psnews.sourceforge.net Version : 1.3 Tested on : Linux & Windows Home : WwW.SeC-WaR.CoM -== SQL Injection Vulenrability ==- http://www.site.com/path/ndetail.php?id=SQL1...

Placeto CMS SQL Injection

Exploit Title : Placeto CMS Auth. Bypass Vulnerability Date : 15 - 5 - 2010 Author : S.W.T Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM Go To The Admin Panel , And Enter The Following Username = or'1'='1' Password = S.W.T This Is Security War Team Penetration Testing & Ethical...

Placeto CMS Auth. Bypass Vulnerability

Exploit for php platform in category web applications ====================================== Placeto CMS Auth. Bypass Vulnerability ====================================== Exploit Title : Placeto CMS Auth. Bypass Vulnerability Date : 15 - 5 - 2010 Author : S.W.T Vendor : www.blahertech.org Version...

JBoss JMX Console Beanshell Deployer WAR Upload And Deployment

$Id: jbossbshdeployer.rb 9596 2010-06-23 22:25:03Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

JBoss JMX Console Beanshell Deployer WAR Upload and Deployment

This module can be used to install a WAR file payload on JBoss servers that have an exposed "jmx-console" application. The payload is put on the server by using the jboss.system:BSHDeployer's createScriptDeployment method. Module Options msf use exploit/multi/http/jboss/bshdeployer msf...

JBoss Java Class DeploymentFileRepository WAR Deployment

This module uses the DeploymentFileRepository class in JBoss Application Server jbossas to deploy a JSP file which then deploys the WAR file. Module Options msf use exploit/multi/http/jboss/deploymentfilerepository msf undefineddeploymentfilerepository show actions ...actions... msf...

iNetScripts Shell Upload Vulnerability

Exploit for php platform in category web applications ================================================== Powered by iNetScripts: Shell Upload Vulnerability ================================================== Contact :Sec-q8 email protected Published: 2010-04-25 Home : http://Sec-Senter.com/vb...

SuSE Security Update: Security update for Tomcat 5 (tomcat5-6841)

This update of tomcat5/6 fixes: CVE-2009-2693: CVSS v2 Base Score: 5.8 CVE-2009-2902: CVSS v2 Base Score: 4.3 Directory traversal vulnerability allowed remote attackers to create or overwrite arbitrary files/dirs with a specially crafted WAR file. CVE-2009-2901: CVSS v2 Base Score: 4.3 When...

Advanced Management For Services Sites - Remote Add Admin

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : Advneced Management For Services Sites Remote add admin exploit Author: alnjm33 Software Link: http://am4ss.com/am4ss.zip Tested on: Version 1.0 My home : Sec-war.com...

Advanced Management For Services Sites - Remote Add Admin

Advanced Management For Services Sites - Remote Add Admin :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : Advneced Management For Services Sites Remote add admin exploit Author: alnjm33 Software Link: http://am4ss.com/am4ss.zip Tested on: Versi...

WebsiteBaker 2.8.1 - DataBase Backup Disclosure

WebsiteBaker 2.8.1 - DataBase Backup Disclosure :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : WebSiteBaker 2.8.1 DataBase Backup Exploit Date : 25 - 3 - 2010 Author : Tr0y-x Version : 2.8.1 & May Be Later Tested On : Windows & Linux My Home :...

Mambo Component com_mambads SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Mambo Component commambads SQL Injection Vulnerability =======================================================...

Dosya Yukle Scrtipi (DosyaYukle Scripti) 1.0 - Arbitrary File Upload

======================================================================================== | Title : Dosya Yukle Scrtipi v1.0 Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.sec-war.com | Dork : Dosya Yukle Scrtipi v1.0 | Tested on: windows SP2 Français V.Pnx2...

tomcat: unexpected file deletion and/or alteration

Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry...

JBoss JMX Console Deployer Upload and Execute

$Id: jbossmaindeployer.rb 8575 2010-02-21 01:44:34Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...