PT-2007-3754 · Comdev · Comdev One Admin Modules Builder

Name of the Vulnerable Software and Affected Versions: Comdev One Admin Modules Builder modbuild version 4.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter to 1 "config-bak.php" or 2 "config.php" endpoints. However, it's noted...

BTSaveMySql 1.2 (acces to config files)

BTSaveMySql 1.2 acces to config files By : sn0oPy Risk : low Site : http://www.google.fr/search?hl=fr&q=22BT-SaveMySql22&btnG=Rechercher&meta= exploit : dork : intitle:"Extranet: Sauvegarde des Tables" to have all acces to the config and save files. no robots.txt with restriction present + no...

DEBIAN-CVE-2005-3088

fetchmailconf before 1.49 in fetchmail 6.2.0, 6.2.5 and 6.2.5.2 creates configuration files with insecure world-readable permissions, which allows local users to obtain sensitive information such as passwords...

jdedwards.app.passwd.txt

Date: Mon, 3 May 1999 15:09:11 -0400 From: "Stout, Bill" To: [email protected] Subject: JDEdwards application passwords Anyone have experience with JDEdwards applicationsWorldVision/OneWorld? The user JDE password JDE is written into multiple places in config files, and is typically installed...

webcart.cc.txt

Date: Fri, 23 Apr 1999 23:14:31 +0200 From: Bo Elkjaer To: [email protected] Subject: Re: Shopping Carts exposing CC data This is my first post to Bugtraq so please bear with me for any errs and/or misconducts. I'd just like to point out, that Webcart is vulnerable too. Here goes: Mountain...