5791 matches found
directory traversal in SimpleCam 1.2
Donato Ferrante Application: SimpleCam http://www.deadpirate.com/ Version: 1.2 Bug: directory traversal Date: 04-May-2005 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...
I-Mall Commerce - i-mall.cgi Remote Command Execution
I-Mall Commerce - i-mall.cgi Remote Command Execution I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1...
CVE-2005-1416
Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the installation folder...
CVE-2005-1416
Directory traversal vulnerability in 04WebServer 1.81 allows remote attackers to read files outside of the web root but within the installation folder...
CVE-2005-0574
Directory traversal vulnerability in CIS WebServer 3.5.13 allows remote attackers to read arbitrary files via .. dot dot sequences in the URL...
CVE-2005-0730
PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service via a request to a file on the floppy drive, as demonstrated using A:\a.txt...
CVE-2005-0734
PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service memory exhaustion and process crash via a large number of HTTP requests...
[Full-disclosure] directory traversal in Yawcam 0.2.5
Donato Ferrante Application: Yawcam http://www.yawcam.com Version: 0.2.5 Bug: directory traversal Date: 21-Apr-2005 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bu...
double094.txt
GulfTech Security Research April 8th, 2005 Vendor : Michael Dean URL : http://dcl.sourceforge.net/ Version : Double Choco Latte 0.9.4 .3 && Earlier Risk : Multiple Vulnerabilities Description: Double Choco Latte is a GNU Enterprise package that provides basic project management capabilities, time...
MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================================ MCPWS Personal WebServer \n"; exit1; system "clear"; $server = $ARGV0; system "clear"; print "- MCPWS Personal-Web Server new Proto = "tcp", PeerAddr = "$server", PeerPort = "80"; unles...
MCPWS Personal WebServer <= 1.3.21 Denial of Service Exploit
No description provided by source. !/usr/bin/perl MCPWS Personal - Webserver = 1.3.21 DoS Exploit Vendor: http://www.mcpsoftware.de The coder used a unsecure VB-function Open to open requested files and didn't include a working error handling On Error Goto etc. It's possible to exploit this...
CoolForum SQL and XSS Vulnerabilities
Binary data 2725.prm...
MCPWS Personal WebServer 1.3.21 - Denial of Service
MCPWS Personal WebServer 1.3.21 - Denial of Service !/usr/bin/perl MCPWS Personal - Webserver \n"; exit1; system "clear"; $server = $ARGV0; system "clear"; print "- MCPWS Personal-Web Server new Proto = "tcp", PeerAddr = "$server", PeerPort = "80"; unless $socket die "- $server is offline\n" prin...
CzarNews 1.13/1.14 - 'headlines.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/12857/info CzarNews is prone to a remote file-include vulnerability. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized...
MCPWS Personal WebServer 1.3.21 - Denial of Service
!/usr/bin/perl MCPWS Personal - Webserver \n"; exit1; system "clear"; $server = $ARGV0; system "clear"; print "- MCPWS Personal-Web Server new Proto = "tcp", PeerAddr = "$server", PeerPort = "80"; unless $socket die "- $server is offline\n" print "- Connected\n\n"; print "- Creating string\n";...
PHPOpenChat 2.3.43.0.1 - ENGLISH_poc.php Remote File Inclusion
PHPOpenChat 2.3.43.0.1 - ENGLISHpoc.php Remote File Inclusion source: https://www.securityfocus.com/bid/12817/info PHPOpenChat is prone to multiple remote file-include vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with...
PHPOpenChat 2.3.43.0.1 - poc_loginform.php?phpbb_root_path Remote File Inclusion
PHPOpenChat 2.3.43.0.1 - pocloginform.php?phpbbrootpath Remote File Inclusion source: https://www.securityfocus.com/bid/12817/info PHPOpenChat is prone to multiple remote file-include vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code on an affecte...
PHPOpenChat 2.3.4/3.0.1 - 'ENGLISH_poc.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/12817/info PHPOpenChat is prone to multiple remote file-include vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate...
CVE-2005-0730
CVE-2005-0730 involves PY Software’s Active WebCam WebServer (webcam.exe) 5.5. The connected sources describe concrete issues: (1) Denial of Service by requesting a file on the floppy drive (A:\a.txt), (2) path disclosure via error messages revealing installation paths for nonexistent files, and ...
CVE-2005-0731
CVE-2005-0731 affects PY Software Active Webcam WebServer (webcam.exe) 5.5. A remote attacker can trigger a denial of service by requesting Filelist.html, leading to increased CPU usage and service impact. The NVD lists a base score of 5.0 (MEDIUM) with network attack vector and partial availabil...