aa33code 0.0.1 - Local File Inclusion / Authentication Bypass / File Disclosure

aa33code 0.0.1 LFI/Auth Bypass/DCD Multiple Remote Vulnerabilites + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/aa33code/files/aa33code/0.0.1/aa33code-0.0.1.tar.gz/download + Local File Inclusion - PoC...

ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure

ARD-9808 DVR Card Security Camera - Arbitrary Configuration Disclosure ------------------------------------------------- SoftWare Name : ARD-9808 DVR Card Security Camera Passwords View Bug ------------------------------------------------- Author : Septemb0x Web Site : www.ozkanbozkurt.com Procut...

LightNEasy sql/no-db 2.2.x - System Configuration Disclosure

!/usr/bin/perl LightNEasy sql/no-db new PeerAddr = $host, PeerPort = 80, Proto = 'tcp', || die $!; $data .= "GET /$path/LightNEasy.php?page=$page%00 HTTP/1.1\r\n"; $data .= "Host: $host\r...

LightNEasy sql/no-db 2.2.x Configuration Disclosure

!/usr/bin/perl LightNEasy sql/no-db new PeerAddr = $host, PeerPort = 80, Proto = 'tcp', || die $!; $data .= "GET /$path/LightNEasy.php?page=$page%00 HTTP/1.1\r\n"; $data .= "Host: $host\r\n"; $data .= "User-Agent: Lynx textmode\r\n"; $data .= "Connection: close\r\n\r\n";...

mrcgiguy the ticket system 2.0 PHP - Multiple Vulnerabilities

MRCGIGUY The Ticket System 2.0 PHPid Multiple Remote Vulnerabilities Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note: Algerie 3-1 Egypt Exploit: ------ SQL INJECTION: -------------...

Flatnux 2009-03-27 - Arbitrary File Upload Information Disclosure

Flatnux 2009-03-27 - Arbitrary File Upload Information Disclosure Author: girex Homepage: girex.altervista.org Date: 17/04/2009 CMS: flatnux-2009-03-27 site: flatnux.altervista.org Bugs: Multiple remote vulnerabilities Flatnux suffers of multiple local file inclusions: output of my scanner Line: ...

phpScribe 0.9 Configuration Disclosure

....................................................................................................... /Remote Config File Disclosure/ script: phpscribe-0.9 download from:http://downloads.sourceforge.net/phpscribe/phpscribe-0.9.zip?modtime=1071100800&bigmirror=0 vul:...

phpScribe 0.9 - 'user.cfg' Remote Configuration Disclosure

....................................................................................................... /Remote Config File Disclosure/ script: phpscribe-0.9 download from:http://downloads.sourceforge.net/phpscribe/phpscribe-0.9.zip?modtime=1071100800&bigmirror=0 vul:...

wpdmsguest-multi.txt

Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities by NBBN 2nd, February 2008 1 File Disclosure Open the following url you can see the config data of wordpress, with the mysql-server username and password. In this file you usually have write permission, so an attacker can place h...

PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability

No description provided by source. PHPDirector = 0.21 SQL injection/Upload SHELL Remote Vulnerabilities WEB APP: PHPDirector 0.21 SITE: http://www.phpdirector.co.uk/site/ DORK: "Powered by PHP Director" AUTHOR: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking -...

Information disclosure

CARE2X 2.2, and possibly earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1574

CARE2X 2.2 (and possibly earlier) is affected by an information-disclosure vulnerability where remote attackers can obtain configuration details via a direct request to phpinfo.php (which calls phpinfo). The provenance of this information is unknown and comes from third party sources. The vulnera...

D-Link Access-Point <= 2.10na (DWL Series) Config Disclosure Vuln

Exploit for hardware platform in category remote exploits ================================================================= D-Link Access-Point = 2.10na DWL Series Config Disclosure Vuln ================================================================= ADVISORY/0206 - D-Link Wireless Access-Point...

OfficeScan configuration file disclosure

Trend Micro OfficeScan Corporate Edition Japanese version: Virus Buster Corporate Edition web-based management console let anybody access /officescan/hotdownload without authentication. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources,...

JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting

Security Advisory: JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting Date: 14/06/05 URL: http://www.illegalaccess.org/java/jbosspath.php Problem: The default installation of JBoss reveals the path of the installation directory and allows...

eZ Publish site.ini Configuration Disclosure

Binary data 1562.prm...

[Full-Disclosure] Sweex 802.11g router/accesspoint config disclosure / remote config

Maniac Security Advisory 2004-01 Configuration disclosure on Wireless Accesspoint/Router SUMMARY Critical elements of the accesspoint's configuration can be discovered by any client connected to the accesspoint. This includes the administration username and password. AFFECTED PRODUCTS Sweex...

eZ Publish settings/site.ini Configuration Disclosure

eZ Publish, a content management system, is installed on the remote host. A remote attacker can retrieve the file 'settings/site.ini', which contains information such as database name, username, and password. This information could be used to mount further attacks. This version of eZ Publish also...

Cisco ATA-186 - HTTP Device Configuration Disclosure

Cisco ATA-186 - HTTP Device Configuration Disclosure source: https://www.securityfocus.com/bid/4711/info The Cisco ATA-186 Analog Telephone Adapter is a hardware device designed to interface between analog telephones and Voice over IP VoIP. It includes support for web based configuration...

Cisco ATA-186 - HTTP Device Configuration Disclosure

source: https://www.securityfocus.com/bid/4711/info The Cisco ATA-186 Analog Telephone Adapter is a hardware device designed to interface between analog telephones and Voice over IP VoIP. It includes support for web based configuration. Reportedly, HTTP requests consisting of a single character...