CVE-2006-4578: Undefined Security Weakness

export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL database contents, which allows remote attackers to obtain sensitive information...

CVE-2006-4578

export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL database contents, which allows remote attackers to obtain sensitive information...

phpMyAdminexport.php文件泄露漏洞

phpMyAdmin是一个免费工具，为管理MySQL提供了一个WWW管理接口。phpMyAdmin包含的'export.php'脚本对用户提交参数缺少充分过滤，远程攻击者可以利用这个漏洞进行目录遍历攻击。phpMyAdmin包含的'export.php'脚本对用户提交给'what'的参数缺少充分过滤，远程攻击者提交包含多个'../'字符的数据，可绕过WEB ROOT限制，以WEB权限查看系统上的任意文件信息。 phpMyAdmin2.5-2.5.5-pl1 phpMyAdmin...

CVE-2005-2399: Undefined Security Weakness

PHP Surveyor 0.98 allows remote attackers to trigger SQL errors via missing parameters to 1 browse.php, 2 export.php, 3 conditions.php, or 4 spss.php...

CVE-2005-2398: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP Surveyor 0.98 allows remote attackers to execute arbitrary SQL commands via 1 the sid, start, and id parameters to browse.php, the sid parameter to 2 dataentry.php, 3 export.php, 4 admin.php, 5 conditions.php, 6 spss.php, 7 deletesurvey.php, 8...

CVE-2005-2380

PHP Surveyor 0.98 is affected by multiple cross-site scripting vulnerabilities. The issue allows remote attackers to inject arbitrary script/HTML via parameters to browse.php (sid, start, id) or to dataentry.php/export.php (sid). OpenVAS notes additional vulnerabilities (SQL injection and path di...

CVE-2005-2380: Undefined Security Weakness

Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the 1 sid, 2 start, and 3 id parameters to browse.php, or the sid parameter to 4 dataentry.php or 5 export.php...

Multiple Vulnerabilities in PHP Surveyor

----------------------------------------------------------- Multiple Vulnerabilities in PHP Surveyor version 0.98 stable ------------------------------------------------------------ Summary: PHP Surveyor is vulnerable to many sql injections, cross site scriptings, and path disclosures. Details:...

CVE-2004-0129: Undefined Security Weakness

Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. dot dot sequences in the what parameter...

phpMyAdmin < 2.5.6-rc1: possible attack against export.php

Background phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databased over the Web. Description One component of the phpMyAdmin software package export.php does not properly verify input that is passed to it from a remote user. Since the input is used to include...

phpMyAdmin 2.x - Export.php File Disclosure

phpMyAdmin 2.x - Export.php File Disclosure source: https://www.securityfocus.com/bid/9564/info phpMyAdmin is prone to a vulnerability that may permit remote attackers to gain access to files that are readable by the hosting web server. The issue is reported to exist in the 'export.php' script an...

phpMyAdmin 2.x - 'Export.php' File Disclosure

source: https://www.securityfocus.com/bid/9564/info phpMyAdmin is prone to a vulnerability that may permit remote attackers to gain access to files that are readable by the hosting web server. The issue is reported to exist in the 'export.php' script and may be exploited by providing directory...