PmWiki 2.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/16421/info PmWiki is prone to multiple input-validation vulnerabilities. These issues are due to failures in the application to properly sanitize user-supplied input. - Arbitrary remote file-include vulnerability. Exploitation of this issue will result in...

Elido Face Control - Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/16401/info Face Control is prone to multiple directory-traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to retrieve arbitrary files from...

RCBlog 1.0.3 - index.php Directory Traversal

RCBlog 1.0.3 - index.php Directory Traversal source: https://www.securityfocus.com/bid/16342/info RCBlog is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

RCBlog 1.0.3 - 'index.php' Directory Traversal

source: https://www.securityfocus.com/bid/16342/info RCBlog is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syste...

IronWall webserver directory traversal

Directory traversal with Обратный путь в каталогах через /.../...

ironwallTraverse.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IronWall webserver 7.41 directory traversal - Software App: IronWall Webserver Version: 7.41 estable others not tested Platform: win32 Background Ironwall webserver is a small web server for win32 systems. It can be downloaded totally free at...

[Full-disclosure] IronWall webserver remote file access.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 IronWall webserver 7.41 directory traversal - Software App: IronWall Webserver Version: 7.41 estable others not tested Platform: win32 Background Ironwall webserver is a small web server for win32 systems. It can be downloaded totally free at...

OABoard 1.0 Forum - Remote File Inclusion

OABoard 1.0 Forum - Remote File Inclusion source: https://www.securityfocus.com/bid/16105/info The oaBoard application is prone to a remote file-include vulnerability. As a result, remote users may specify external PHP scripts to be included by the application. This could result in the execution ...

OABoard 1.0 Forum - Remote File Inclusion

source: https://www.securityfocus.com/bid/16105/info The oaBoard application is prone to a remote file-include vulnerability. As a result, remote users may specify external PHP scripts to be included by the application. This could result in the execution of arbitrary PHP code in the context of th...

IceWarp Universal WebMail - '/mail/settings.html?Language' Local File Inclusion

source: https://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites. An attacker can exploit these issues to include arbitra...

IceWarp Universal WebMail - dirinclude.html?lang Local File Inclusion

IceWarp Universal WebMail - dirinclude.html?lang Local File Inclusion source: https://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into...

IceWarp Universal WebMail - mailindex.html?lang_settings Remote File Inclusion

IceWarp Universal WebMail - mailindex.html?langsettings Remote File Inclusion source: https://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal...

IceWarp Universal WebMail - adminincinclude.php Multiple Remote File Inclusions

IceWarp Universal WebMail - adminincinclude.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal...

IceWarp Universal WebMail - mailinclude.html Crafted HTTP_USER_AGENT Arbitrary File Access

IceWarp Universal WebMail - mailinclude.html Crafted HTTPUSERAGENT Arbitrary File Access source: https://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp...

Tolva 0.1 - Usermods.php Remote File Inclusion

Tolva 0.1 - Usermods.php Remote File Inclusion source: https://www.securityfocus.com/bid/16000/info Tolva is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the...

Tolva 0.1 - 'Usermods.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/16000/info Tolva is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may help the attacker...

toendaCMS.txt

Description: ToendaCMS is an Open Source XML web content management system released under the GNU General Public License. You can use it for free. ToendaCMS is optimized for fast and easy setup and works on any standard webserver platform that supports PHP and was tested successfully on Windows...

Gallery 2.x Security Advisory

Gallery is an open source web based photo album organizer. The 2.x is a newly released complete rewrite of the application. Url: http://gallery.menalto.com Contact: [email protected] An internal security audit turned up 3 separate vulnerabilities. These are all resolved in Gallery 2.0.2, releas...

PHP Photo Album 0.2.34.1 - Local File Inclusion

PHP Photo Album 0.2.34.1 - Local File Inclusion source: https://www.securityfocus.com/bid/15651/info phpAlbum is prone to a local file-include vulnerability. An attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges o...

PHP Photo Album 0.2.3/4.1 - Local File Inclusion

source: https://www.securityfocus.com/bid/15651/info phpAlbum is prone to a local file-include vulnerability. An attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges of the webserver process. Note that this issue ma...