614 matches found
WordPress Plugin Mediatricks Viva Thumbs - Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/45539/info The Mediatricks Viva Thumbs plugin for WordPress is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues using directory-traversal strings to...
Project Jug Directory Traversal
------------------------------------------------------------------------ Software................Project Jug Vulnerability...........Directory Traversal Download................http://sourceforge.net/p/projectjug/home/ Release Date............10/31/2010 Tested On...............Windows Vista...
Project Jug 1.0.0 - Directory Traversal
Project Jug 1.0.0 - Directory Traversal source: https://www.securityfocus.com/bid/44569/info Project Jug is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to read files outside the webroot...
Project Jug 1.0.0 - Directory Traversal
source: https://www.securityfocus.com/bid/44569/info Project Jug is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to read files outside the webroot directory. Information harvested may aid i...
MinaliC Webserver v1.0 Directory Traversal Vulnerability
Exploit for windows platform in category remote exploits ======================================================== MinaliC Webserver v1.0 Directory Traversal Vulnerability ========================================================...
MinaliC WebServer 1.0 - Directory Traversal
MinaliC WebServer 1.0 - Directory Traversal ------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Directory Traversal Download................http://sourceforge.net/projects/minalic/ Release...
QuickShare <= 1.0 Directory Traversal Vulnerability - Active Check
QuickShare is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
QuickShare 1.0 Directory Traversal
------------------------------------------------------------------------ Software................QuickShare 1.0 Vulnerability...........Directory Traversal Download................http://houbysoft.com/ Release Date............9/15/2010 Tested On...............Windows XP...
YelloSoft Pinky 1.0 - Directory Traversal
YelloSoft Pinky 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/43358/info Pinky is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to read files outside the webroot...
Immunity Canvas: CF_DIRECTORY_TRAVERSAL
Name| CFdirectorytraversal ---|--- CVE| CVE-2010-2861 Exploit Pack| CANVAS Description| ColdFusion Directory Traversal Notes| CVE Name: CVE-2010-2861 VENDOR: http://www.adobe.com Things to consider: 1 - A remote file i-test10-1.cfm will be left in the webroot as well as the CANVAS callback trojan...
Blog System 1.5 - Multiple Vulnerabilities
Blog System 1.5 - Multiple Vulnerabilities Exploit Title: Blog System | www.DigitalWhisper.co.il Software Link: http://www.netartmedia.net/blogsystem/ | http://www.netartmedia.net/blogsystem/demo.html Version: = 1.5 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of...
Blog System <= 1.5 Multiple Vulnerabilities
Exploit for php platform in category web applications =========================================== Blog System | www.DigitalWhisper.co.il Software Link: http://www.netartmedia.net/blogsystem/ | http://www.netartmedia.net/blogsystem/demo.html Version: = 1.5 Tested on: PHP Cross Site Scripting...
OSSIM repository_attachment.php页面任意文件上传漏洞
BUGTRAQ ID: 37377 OSSIM即开源安全信息管理（Open Source Security Information Management），是一个非常流行和完整的开源安全管理系统。 OSSIM的ossiminstall/repository/repositoryattachment.php脚本没有正确地执行安全检查，用户可以向Webroot中的文件夹上传带有任意扩展名的文件。如果用户上传了包含有某些Web Shell的PHP脚本，就会导致执行任意PHP代码。 AlienVault OSSIM 2.2 AlienVault OSSIM 2.1.5 厂商补丁：...
Cherokee 0.5.4 Directory Traversal
Cherokee Web Server = 0.5.4 Directory Traversal Exploit Found By: DrIDE Tested On: Windows XPSP3 Download: www.cherokee-project.com/download/windows - Description - Cherokee Web Server = 0.5.4 is a Windows based HTTP server. This is the latest version of the application available. Cherokee Web...
Cherokee <=0.5.4 directory traversal
No description provided by source. Cherokee Web Server = 0.5.4 Directory Traversal Exploit Found By: DrIDE Tested On: Windows XPSP3 Download: www.cherokee-project.com/download/windows - Description - Cherokee Web Server = 0.5.4 is a Windows based HTTP server. This is the latest version of the...
Design/Logic Flaw
Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors...
CVE-2009-3654
Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors...
CVE-2009-3654
Unspecified vulnerability in Boost before 6.x-1.03, a module for Drupal, allows remote attackers to create new webroot directories via unknown attack vectors...
CVE-2009-3654
The vulnerability concerns Boost for Drupal (module) prior to 6.x-1.03. It allows remote attackers to create new webroot directories via unknown attack vectors. The root cause is not specified in the provided documents, and no remediation details (patch/version fixes) are described here. Exploit ...
nginx 0.7.61 WebDAV directory traversal
Exploit for unknown platform in category remote exploits ======================================= nginx 0.7.61 WebDAV directory traversal ======================================= Title: nginx 0.7.61 WebDAV directory traversal CVE-ID: OSVDB-ID: Author: Kingcope Published: 2009-09-23 Verified: yes vi...