1501 matches found
redaxscript 0.3.2 - Multiple Vulnerabilities
No description provided by source. ================================== Vulnerability ID: HTB22805 Reference: http://www.htbridge.ch/advisory/pathdisclosureinredaxscript.html Product: Redaxscript Vendor: http://redaxscript.com/ http://redaxscript.com/ Vulnerable Version: 0.3.2 Vendor Notification: ...
Netscape Directory Server 4.12 - Directory Server Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in Netscape Directory Server. This is made possible through the use of ../ in a HTTP request. The...
TIPS MailPost 5.1.1 - Remote File Enumeration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11599/info TIPS MailPost is affected by a remote file enumeration vulnerability. This issue is due to a failure to properly sanitize user requests. An attacker may leverage this issue to gain knowledge of the existence of...
viscacha 0.8.1 - Multiple Vulnerabilities
No description provided by source. Vulnerability ID: HTB22921 Reference: http://www.htbridge.ch/advisory/sqlinjectioninviscacha.html Product: Viscacha Vendor: MaMo Net http://www.viscacha.org Vulnerable Version: 0.8.1 Vendor Notification: 24 March 2011 Vulnerability Type: SQL Injection Risk level...
video cam server 1.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13456/info Video Cam Server is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://www.example.com/......................\windows\system.ini GET...
iPlanet Certificate Management System 4.2 - Directory Traversal
No description provided by source. source: http://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in both iPlanet Certificate Management System CMS. This is made possible through the use of ../ in a HTT...
file sharing for net 1.5 - Directory Traversal file disclosure vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8513/info File Sharing for Net is said to be prone to a directory traversal vulnerability, potentially allowing users to disclose the contents of system files. The problem occurs due to the application failing to parse...
Tele Data Contact Management Server Directory Traversal
No description provided by source. ------------------------------------------------------------------------ Software................Tele Data Contact Management Server Vulnerability...........Directory Traversal Threat Level............Serious 3/5...
TalentSoft Web+ Client/Monitor/server 4.6 Source Code Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1722/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. Web+ can be used to display the source code of WML files residing on an NTFS parition by appending certain data t...
Apache Tomcat 3.2.3/3.2.4 Source.JSP Malformed Request Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/4876/info Apache Tomcat is a freely available, open source web server maintained by the Apache Foundation. Under some circumstances, Tomcat may yield sensitive information about the web server configuration. When the...
ManageEngine Desktop Central / Password Manager LinkViewFetchServlet.dat SQL Injection
This module exploits an unauthenticated blind SQL injection in LinkViewFetchServlet, which is exposed in ManageEngine Desktop Central v7 build 70200 to v9 build 90033 and Password Manager Pro v6 build 6500 to v7 build 7002 including the MSP versions. The SQL injection can be used to achieve remot...
CVE-2014-2865
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a '\0' character, as demonstrated by using this character within a pathname on the drive containing the web root directory of a ColdFusion installation...
CVE-2014-2865
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a '\0' character, as demonstrated by using this character within a pathname on the drive containing the web root directory of a ColdFusion installation...
Apache Tomcat Server Malicious Request Information Disclosure (CVE-2002-2006; CVE-2002-2007; CVE-2002-2008)
An Information disclosure vulnerability has been reported in Apache Tomcat servers. The vulnerability is due to an error in the way Apache Tomcat handles specially crafted page requests. A remote attacker can exploit this vulnerability by sending crafted requests which will result in Apache Tomca...
vTiger CRM AddEmailAttachment arbitrary file upload
Added: 01/10/2014 CVE: CVE-2013-3214 BID: 61558 OSVDB: 95902 Background vTiger CRM is a customer relationship management application written in PHP. Problem An arbitrary file upload vulnerability when handling SOAP AddEmailAttachment requests allows remote attackers to execute arbitrary commands ...
vTiger CRM AddEmailAttachment arbitrary file upload
Added: 01/10/2014 CVE: CVE-2013-3214 BID: 61558 OSVDB: 95902 Background vTiger CRM is a customer relationship management application written in PHP. Problem An arbitrary file upload vulnerability when handling SOAP AddEmailAttachment requests allows remote attackers to execute arbitrary commands ...
DesktopCentral AgentLogUpload - Arbitrary File Upload (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'DesktopCentral AgentLogUpload Arbitrary File Upload', 'Description' = %q This module exploits an arbitrary file upload vulnerability ...
DesktopCentral AgentLogUpload Arbitrary File Upload Vulnerability
This Metasploit module exploits an arbitrary file upload vulnerability in DesktopCentral 8.0.0 below build 80293. A malicious user can upload a JSP file into the web root without authentication, leading to arbitrary code execution. This module requires Metasploit: http//metasploit.com/download...
EverFocus Multiple Devices Directory Traversal (Mar 2013) - Active Check
Multiple EverFocus devices are prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
PT-2013-2501
Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Real-Time Information Portal affected versions not specified Description The issue concerns the Portal installation process, which stores sensitive information under the web root with insufficient access contro...