MinaliC WebServer 2.0 - Remote Source Disclosure

MinaliC WebServer 2.0 - Remote Source Disclosure Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure Software link : http://sourceforge.net/projects/minalic/ Version : 2.0 Tested on : Windows 7 Home Premium Date : 27/07/2011 Author : X-h4ck Website : http://www.pirate.al ,...

MinaliC WebServer 2.0 - Remote Source Disclosure

Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure Software link : http://sourceforge.net/projects/minalic/ Version : 2.0 Tested on : Windows 7 Home Premium Date : 27/07/2011 Author : X-h4ck Website : http://www.pirate.al , http://theflashcrew.blogspot.com Email : [email protected]...

Chyrp 2.x - '/admin/help.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...

Chyrp 2.x - includesJavaScript.php?action Cross-Site Scripting

Chyrp 2.x - includesJavaScript.php?action Cross-Site Scripting source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability...

Chyrp 2.x - adminhelp.php Multiple Cross-Site Scripting Vulnerabilities

Chyrp 2.x - adminhelp.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal...

Portix-CMS 'page' Parameter Local File Include Vulnerability

Portix-CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context of the webserver process. This may allow...

Joomla! Component com_jr_tfb - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/48558/info The 'comjrtfb' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute...

Joomla! Component com_jr_tfb - Controller Local File Inclusion

Joomla! Component comjrtfb - Controller Local File Inclusion source: https://www.securityfocus.com/bid/48558/info The 'comjrtfb' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerabili...

Sitemagic CMS - 'SMTpl' Directory Traversal

source: https://www.securityfocus.com/bid/48399/info Sitemagic CMS is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain arbitrary local files in the context of the webserver process...

Sitemagic CMS - SMTpl Directory Traversal

Sitemagic CMS - SMTpl Directory Traversal source: https://www.securityfocus.com/bid/48399/info Sitemagic CMS is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain arbitrary local files in the...

PHP-Nuke 8.3 - 'upload.php' Arbitrary File Upload (1)

source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process...

PHP-Nuke 8.3 - 'upload.php' Arbitrary File Upload (2)

source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process...

PHP-Nuke 8.3 - upload.php Arbitrary File Upload (2)

PHP-Nuke 8.3 - upload.php Arbitrary File Upload 2 source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code a...

PHP-Nuke 8.3 - upload.php Arbitrary File Upload (1)

PHP-Nuke 8.3 - upload.php Arbitrary File Upload 1 source: https://www.securityfocus.com/bid/48257/info Phpnuke is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input. An attacker can exploit this issue to upload arbitrary code a...

Xataface 1.x - 'action' Local File Inclusion

source: https://www.securityfocus.com/bid/48126/info Xataface is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in t...

Xataface 1.x - action Local File Inclusion

Xataface 1.x - action Local File Inclusion source: https://www.securityfocus.com/bid/48126/info Xataface is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information...

PopScript - index.php Multiple Input Validation Vulnerabilities

PopScript - index.php Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/48113/info PopScript is prone to a remote file-include vulnerability, an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize...

AIDeX Mini-Webserver 1.4 Cross Site Scripting

Exploit Title: AIDeX Mini-Webserver 1.4 integrated Chat Javascript Injection Vulnerability Autor: wingthor Author-Email:[email protected] Author-Website german:http://www.wingthor.de Date: 30.12.10 Tool: AIDeX Mini-Webserver Version: 1.4...

Sybase Easerver 6.3 Directory Traversal

This module exploits a directory traversal vulnerability found in Sybase EAserver's Jetty webserver on port 8000. Code execution seems unlikely with EAserver's default configuration unless the web server allows WRITE permission. Module Options msf use auxiliary/scanner/http/sybase/easervertravers...

MidiCMS Website Builder - Local File Inclusion / Arbitrary File Upload

source: https://www.securityfocus.com/bid/47970/info MidiCMS Website Builder is prone to a local file-include vulnerability and an arbitrary-file-upload vulnerability. An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files within the conte...