phpScribe 0.9 (user.cfg) Remote Config Disclosure Vulnerability

No description provided by source. ....................................................................................................... /Remote Config File Disclosure/ script: phpscribe-0.9 download from:http://downloads.sourceforge.net/phpscribe/phpscribe-0.9.zip?modtime=1071100800&bigmirror=...

phpScribe 0.9 (user.cfg) Remote Config Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== phpScribe 0.9 user.cfg Remote Config Disclosure Vulnerability ===============================================================...

phpScribe 0.9 - 'user.cfg' Remote Configuration Disclosure

....................................................................................................... /Remote Config File Disclosure/ script: phpscribe-0.9 download from:http://downloads.sourceforge.net/phpscribe/phpscribe-0.9.zip?modtime=1071100800&bigmirror=0 vul:...

Code injection

chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service chm2pdf failure of other users by creating those directories ahead of time...

CVE-2008-5298

chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service chm2pdf failure of other users by creating those directories ahead of time...

Design/Logic Flaw

chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the 1 /tmp/chm2pdf/work or 2 /tmp/chm2pdf/orig temporary directories...

CVE-2008-5298

Removed by vendor...

Design/Logic Flaw

delqueueask in rccp 0.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cccptmp.txt temporary file...

CVE-2008-4980

delqueueask in rccp 0.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cccptmp.txt temporary file...

CVE-2008-4730

The CVE-2008-4730 entry describes a Cross-site scripting (XSS) vulnerability in phpMyID 0.9, specifically in MyID.php, where the openid_trust_root parameter and an inconsistent openid_return_to parameter are not properly sanitized in an error message. This allows remote attackers to inject arbitr...

CVE-2008-4730

Cross-site scripting XSS vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openidtrustroot parameter and an inconsistent openidreturnto parameter, which is not properly handled in an error message...

CVE-2008-4245

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to 1 change a user's privileges, 2 delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the...

Design/Logic Flaw

The Admin Control Panel in Rianxosencabos CMS 0.9 does not require administrator privileges, which allows remote authenticated users to 1 change a user's privileges, 2 delete a user account, or perform unspecified other administrative actions via vectors involving an admin lista action to the...

rianxosencabos09-admin.txt

!/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login, $pass, $mail, $userid = @ARGV ; unless$ARGV4 print " usage:...

Rianxosencabos CMS 0.9 - Remote Add Admin

!/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login, $pass, $mail, $userid = @ARGV ; unless$ARGV4 print " usage:...

Rianxosencabos CMS 0.9 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ============================================================= Rianxosencabos CMS 0.9 Insecure Cookie Handling Vulnerability ============================================================= + Rianxosencabos CMS 0.9 Insecure Cookie Handling...

CVE-2008-3027

The CVE-2008-3027 entry concerns a SQL injection in VanGogh Web CMS 0.9. The vulnerability is in get_article.php and is exploitable via the article_ID parameter on index.php, enabling an attacker to execute arbitrary SQL commands. The available data indicates remote access without authentication ...

VanGogh Web CMS 0.9 (article_ID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== VanGogh Web CMS 0.9 articleID Remote SQL Injection Vulnerability ===================================================================...

OpenInvoice 0.9 Arbitrary Change User Password Exploit

No description provided by source. !/usr/bin/perl OpenInvoice 0.9 Arbitrary Change User Password Exploit Discovered && Coded By t0pP8uZz Discovered On: 18 April 2008 Vendor has not been notified! see exploit for more details.. Greetz: milw0rm.com, h4ck-y0u.org, CipherCrew! use strict; use...

OpenInvoice 0.9 - Arbitrary Change User Password

!/usr/bin/perl OpenInvoice 0.9 Arbitrary Change User Password Exploit Discovered && Coded By t0pP8uZz Discovered On: 18 April 2008 Vendor has not been notified! see exploit for more details.. Greetz: milw0rm.com, h4ck-y0u.org, CipherCrew! use strict; use LWP::UserAgent; use HTTP::Cookies; print...