NSA Group

3 exploits Active since Feb 2006
CVE-2006-0976 EXPLOITDB text WORKING POC
SPiD 1.3.1 - Path Traversal via scan_lang_insert.php lang Parameter
Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter.
CVE-2006-0936 EXPLOITDB text WORKING POC
Free Host Shop Website Generator 3.3 - RCE
Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00.
CVE-2006-0922 EXPLOITDB html WORKING POC
CubeCart 3.0-3.6 - Unauthenticated Arbitrary File Upload via FileManager CurrentFolder Parameter
CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php (aka upload.php) that allows remote attackers to upload arbitrary files via a modified CurrentFolder parameter in a direct request to admin/filemanager/upload.php.