CVE-2007-3556

The CVE-2007-3556 case involves Liesbeth base CMS, where sensitive information is stored under the web root due to insufficient access control. This allows remote attackers to download an include file containing account credentials by directly requesting config.inc. Documented impact is partial c...

Default password 'db2as' for account 'db2as' (SSH/Telnet)

The account SPDX-FileCopyrightText: 2003 Chris Foster Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11864";...

EasyWeb 1.0 FileManager Module - Directory Traversal

source: https://www.securityfocus.com/bid/10792/info EasyWeb is prone to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. The issue occurs if a remote attacker sends a request to the 'ewfilemanager' script for a file containin...

PT-1999-1462 · Webtrends · Webtrends

Name of the Vulnerable Software and Affected Versions: WebTrends affected versions not specified Description: The issue concerns the storage of account names and passwords in a file by the WebTrends software. This file does not have restricted access permissions, which could lead to unauthorized...