114 matches found
CVE-2006-1841: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.php in boastMachine bMachine 2.7, and possibly other versions before 2.9b, allows remote attackers to inject arbitrary web script or HTML via the key parameter, as used by the search field...
Information disclosure
boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php and 2 sidemenu.php, which reveals the path in an error message...
CVE-2006-0131
boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php and 2 sidemenu.php, which reveals the path in an error message...
CVE-2006-0131
boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php and 2 sidemenu.php, which reveals the path in an error message...
CVE-2006-0131
The provided documents describe a vulnerability in boastMachine 3.1 where remote attackers can disclose sensitive information by directly requesting footer.php and side_menu.php, revealing the path in an error message. Affected component: the web application’s error handling/output of these scrip...
CVE-2006-0131: Undefined Security Weakness
boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php and 2 sidemenu.php, which reveals the path in an error message...
[ECHO_ADV_25$2006] Full path disclosure on boastMachine v3.1
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV25$2006 --------------------------------------------------------------------------- ECHOADV25$2006 Full path disclosure on boastMachine v3.1 --------------------------------------------------------------------------- Author : M.Hasran...
CVE-2005-1580
BoastMachine 3.0 is affected by an arbitrary file upload via users.ini.php due to improper file type restriction, enabling remote code execution. Connected records also indicate a vulnerability class lasting into newer versions; remediation noted in Nessus: upgrade to BoastMachine 3.1 or later to...
CVE-2005-1580
users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code...
CVE-2005-1580: Undefined Security Weakness
users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code...
[SA15312] BoastMachine File Upload Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: BoastMachine File Upload Vulnerability SECUNIA ADVISOR...
boastMachine users.inc.php File Extension Validation Arbitrary File Upload
The remote host is running boastMachine, an open source publishing tool written in PHP. According to its banner, the version of boastMachine installed on the remote host allows authenticated users to upload arbitrary files and then run them subject to the privileges of the web server user...