CVE-2011-3805

TaskFreak! multi-mysql-0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/language/zh/registerinfo.php and certain other files...

Information disclosure

TaskFreak! multi-mysql-0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/language/zh/registerinfo.php and certain other files...

CVE-2011-3805

TaskFreak! multi-mysql-0.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/language/zh/registerinfo.php and certain other files...

CVE-2011-3821

CVE-2011-3821 affects xajax 0.6 beta1. A direct request to a vulnerable PHP file (e.g., xajax_core/plugin_layer/xajaxScriptPlugin.inc.php and related files) may disclose the installation path via an error message. The provided documents confirm the information-disclosure impact but do not describ...

PHPFinance 'group.php' SQL Injection and HTML Injection Vulnerabilities

PHPFinance is prone to an SQL-injection vulnerability and an HTML- injection vulnerability because it fails to sufficiently sanitize user- supplied input. An attacker may exploit the HTML-injection issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

PHPFinance 0.6 - '/group.php' SQL Injection / HTML Injection

source: https://www.securityfocus.com/bid/42230/info PHPFinance is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may exploit the HTML-injection issue to execute arbitrary script code in the...

CVE-2009-4960

Directory traversal vulnerability in modules/backup/download.php in Lanai Core 0.6 allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...

Directory traversal

Directory traversal vulnerability in modules/backup/download.php in Lanai Core 0.6 allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...

Information disclosure

Lanai Core 0.6 allows remote attackers to obtain configuration information via a direct request to info.php, which calls the phpinfo function...

Piwik -- Local File Inclusion Vulnerability

Piwik versions 0.6 through 0.6.3 are vulnerable to arbitrary, remote file inclusion using a directory traversal pattern infinite a crafted request for a data renderer. A vulnerability has been reported in Piwik, which can before exploited by malicious people to disclose potentially sensitive...

CVE-2009-4961

CVE-2009-4961 affects Lanai Core 0.6. Affected component: info.php that calls phpinfo, enabling remote attackers to disclose configuration information. Impact is information disclosure (no integrity/availability impact stated). No remediation details are provided in the trusted documents; upgradi...

CVE-2009-4960

CVE-2009-4960 describes a directory traversal in Lanai Core 0.6, where an attacker can read arbitrary files by supplying a ".." in the f parameter to modules/backup/download.php. Multiple connected sources (NVD, CVE lists, PRION, CVELIST, EUVD) corroborate the same description. The core cause is ...

PeteWiki 0.6 Cross Site Scripting

------------------------------------------------------------------------ Software................PeteWiki 0.6 Vulnerability...........Reflected Cross-site Scripting Download................http://code.google.com/p/petewiki/downloads/list Release Date............7/11/2010 Tested...

Kryn CMS 0.6 Cross Site Request Forgery / Cross Site Scripting

Found By: TurboBorland Email Address: [email protected] Software: Kryn =0.6 Date Found: 06/21/2010 Date Submitted: 06/29/2010 Ethical Disclosure: Vendor submitted - Replied with fix: "We've fix this issues and already uploaded the new versions for kryn-core and usermanagement." - Submission to...

CVE-2010-2033

Directory traversal vulnerability in the Percha Multicategory Article comperchacategoriestree component 0.6 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

YahooPOPs (YPOPS) 0.6 - Remote Buffer Overflow (Metasploit)

$Id: ypopsoverflow1.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

OneHTTPD Directory Traversal Vulnerability

OneHTTPD is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. OneHTTPD 0.6 is vulnerable; other versions may also be affecte...

OneHTTPD 0.6 Directory Traversal

|=================================================================================================| | | | /\ \ /\ \ /\ /\ \ /\ \ /\ \ | | /::\ \ /::\ \ /::| | /\ \ /::\ \ /::\ \ /::\ \ | | /:/:\ \ /:/:\ \ /:|:| | :\ \ /:/:\ \ /:/:\ \ /:/:\ \ | | /:/ :\ \ /:/ :\ \ /:/|:| | /::\ /::\:\ ...

PHP Krazy Image Host Script <= 0.6 Shell Upload Vulnerability

Exploit for php platform in category web applications ============================================================= PHP Krazy Image Host Script Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 ...

Piwik 0.5.5 - 'form_url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39144/info Piwik is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...