502 matches found
CVE-2007-6221
TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Information disclosure
TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-6221: Exposure of Sensitive Information to an Unauthorized Actor
TuMusika Evolution 1.7R5 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2002-2410
openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information...
CVE-2007-5129
SimpGB 1.46.02 stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 obtain sensitive configuration information via a direct request for admin/cfginfo.php; and 2 download arbitrary .inc files via a direct request, as demonstrated by...
Samurai download and Samurai articles of the exploit-vulnerability warning-the black bar safety net
One injection vulnerability You can fast forward to see First just point a software download The official update to 2. 4, but the official himself then, but there are also vulnerabilities Oh The download address of the Copy to the next kid inside, I changed%6 9 See? there is no change before is n...
PHP-Blogger pref.db Database Information Disclosure
The remote host is running PHP-Blogger, a photo blog script written in PHP. The version of PHP-Blogger installed on the remote host stores configuration information in the file 'data/pref.db' and fails to restrict access to this file. By issuing a direct request for the file, an attacker can gain...
Information disclosure
Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3525
Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-3525
Ripe Website Manager 0.8.9 and earlier suffers an information disclosure vulnerability where an unauthenticated remote attacker can access includes/phpinfo.php, which calls phpinfo and reveals configuration information. Root cause: direct request to a file that executes phpinfo. Impact: disclosur...
CVE-2007-3191
Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function...
Information disclosure
Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function...
CVE-2007-3191
Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function...
Information disclosure
VMware Workstation before 5.5.4 allows attackers to cause a denial of service against the guest OS by causing the virtual machine process VMX to store malformed configuration information...
CVE-2006-6998
install/loaderhelp.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via a q=phpinfo QUERYSTRING, which calls the phpinfo function...
INCA IM-204 - Information Disclosure
source: https://www.securityfocus.com/bid/20696/info INCA IM-204 devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to gain access to potentially...
INCA IM-204 - Information Disclosure
INCA IM-204 - Information Disclosure source: https://www.securityfocus.com/bid/20696/info INCA IM-204 devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attacker...
D-Link DSL-G624T - Information Disclosure
source: https://www.securityfocus.com/bid/20689/info D-Link DSL-G624T devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to gain access to potentially...
D-Link DSL-G624T - Information Disclosure
D-Link DSL-G624T - Information Disclosure source: https://www.securityfocus.com/bid/20689/info D-Link DSL-G624T devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticate...