The Joomla Component com_connect is vulnerable to Local File Inclusion (LFI) attack. An attacker can exploit this vulnerability to include local files and potentially disclose sensitive information.
The Filefuzzer software is vulnerable to a denial of service attack. By setting up the application to fuzz the 'bkf' file type and executing the application with a modified argument, an attacker can cause the application to crash.
WinTFTP Pro Server is vulnerable to a path traversal vulnerability, which allows an unprivileged attacker to read and write files that they do not have permissions for. The vulnerability can be exploited using the FTP commands GET and PUT.
The logic error vulnerability allows an attacker to change the admin password by exploiting the '/as/index.php' script. The XSS vulnerability allows an attacker to execute malicious scripts by injecting them into the 'username' variable from a cookie. The SQL injection vulnerability allows an attacker to manipulate the SQL queries in the '/as/index.php' script.
A directory traversal vulnerability was found in Mongoose version 2.11. This vulnerability allows an attacker to access files outside of the intended directory.
This exploit allows an attacker to traverse directories and access files outside of the intended directory structure. The exploit is performed using the DotDotPwn tool with specific parameters.
The vulnerability allows an unprivileged attacker to read files and delete files & folders whom he has no permissions to.
The vulnerability allows an unprivileged attacker to read files and delete files & folders whom he has no permissions to.
This is a SQL injection exploit for the mygamingladder MGL Combo System version 7.5 game.php script. It allows an attacker to inject SQL commands and potentially gain unauthorized access to the database.
The Home FTP Server software allows for directory traversal, which can be exploited by an attacker to access files outside of the intended directory structure.