520 matches found
CVE-2015-2184
ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls the phpinfo function...
CVE-2015-2184
ZeusCart 4 is affected by an information-disclosure vulnerability: remote attackers can retrieve configuration data by invoking the getphpinfo operation on admin/ which triggers the PHP phpinfo() function. This exposes sensitive configuration details and is documented across multiple sources (NVD...
PT-2015-5648
Name of the Vulnerable Software and Affected Versions ZeusCart version 4 Description The issue allows remote attackers to obtain configuration information. This is achieved by accessing the admin/ endpoint with a getphpinfo action, which invokes the phpinfo function. Recommendations For ZeusCart...
PT-2015-3311
Name of the Vulnerable Software and Affected Versions Siemens SIMATIC STEP 7 TIA Portal versions prior to 14 Description The issue is related to the use of an improper format for managing TIA project files during version updates. This can allow a local attacker to obtain sensitive configuration...
From one upload to Maxthon within the network-vulnerability warning-the black bar safety net
From one upload to Maxthon within the network The first is to find a sub-domain name of the upload custom. maxthon. cn In the upload icon when only verifies the content-type is not on file after the judgment ! 1532ed2be1f9d7260dd9085f527ba9e0. png Simple modification packages to get to the shell ...
NAT-PMP Protocol vulnerability 1 2 0 0 million routers at risk-vulnerability and early warning-the black bar safety net
Present in the embedded device vulnerability, especially the kind of small office and home office route, is never a steady stream. This week security researchers discovered a serious vulnerability, because theNAT-PMP Protocol improper design will affect more than 1 2 0 0 million of the router...
NAT-PMP Security Vulnerability Affects 1.2M Routers
Vulnerabilities in embedded devices, in particular small office and home office routers, have been relentless. Another serious issue was discovered this week that affects more than 1.2 million such devices due to improper NAT-PMP protocol implementations, most of which run counter to the...
CVE-2014-5094
Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function...
Default configuration
Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function...
CVE-2014-5094
Status2k allows remote attackers to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function...
CVE-2014-5094
CVE-2014-5094 affects Status2k Server Monitoring Software. The vulnerability stems from a phpinfo call in status/index.php, which is reachable remotely and leads to disclosure of configuration information. Multiple connected sources (NVD/NVD-derived entries, OpenVAS/ExploitDB references, and thir...
PT-2014-6274
Name of the Vulnerable Software and Affected Versions Status2k affected versions not specified Description The issue allows remote attackers to obtain configuration information by sending a request to "status/index.php" with a phpinfo action, which invokes the phpinfo function. Recommendations At...
Information disclosure
The EasyCart wp-easycart plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function...
CVE-2014-4942
The EasyCart wp-easycart plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function...
Achievo 0.7/0.8/0.9 - Remote File Include Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5552/info Achievo includes a PHP script which is used to generate JavaScript class.atkdateattribute.js.php. This script employs a number of PHP includeonce statements to call code contained in function libraries and grab...
Netbilling NBMEMBER Script Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11504/info Netbilling 'nbmember.cgi' script is reported prone to an information disclosure vulnerability. This issue may allow remote attackers to gain access to user authentication credentials and potentially sensitive...
Linksys Devices 1.42/1.43 GET Request Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6301/info Several Linksys Broadband Router devices are prone to a buffer overflow conditions. The vulnerability occurs due to insufficient allocation of memory for buffers. An attacker can exploit this vulnerability by...
Clever Copy 3.0 Connect.INC Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17461/info Clever Copy is prone to an information-disclosure vulnerability. A remote attacker could leverage this issue to gain access to sensitive configuration information. The attacker could then use this information t...
大汉jbook、jget、jvideo、source、jphoto和lm的通用越权漏洞
简要描述： jbook=订阅系统（好像是） source=数据源采集系统 jget=信息采集系统 jvideo=视频系统 jphoto=图片系统 lm=互动系统 大概就是这样。 详细说明： 某个同名文件虽然代码大同小异，但是都产生了同样的越权漏洞，可以重置这几个系统的安装目录相关配置信息。 漏洞证明： None 先用jphoto来做例子。 http://www.yzwh.gov.cn/jphoto/setup/ 这是jphoto的setup目录，先用exp提交数据： 提交成功后，提示配置文件修改完成，重启服务。 Exp里面是把密码设置为123456的...
Level One Enterprise Access Point (Multiple Devices) - backupCfg.cgi Security Bypass
Level One Enterprise Access Point Multiple Devices - backupCfg.cgi Security Bypass source: https://www.securityfocus.com/bid/63168/info Multiple Level One Enterprise Access Point devices are prone to a security bypass vulnerability. Successfully exploiting this issue may allow an attacker to gain...