M-Core Remote Password Disclosure Vulnerability

M-Core Remote Password Disclosure Vulnerability Software: M-Core Download: http://aspindir.com/indir.asp?id=4412 Found by: beks Risk: Medium http://target/M-CorePath/db/uyelik.mdb...

CVE-2007-0075: Undefined Security Weakness

AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for db/aspbb.mdb...

CVE-2007-0090: Undefined Security Weakness

WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/data.mdb...

CVE-2006-6888: Undefined Security Weakness

P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for db/user.dat...

CVE-2007-0089: Undefined Security Weakness

jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/bbs.mdb...

CVE-2006-6810

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

CVE-2006-6810

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

CVE-2006-6810

DB Hub 0.3 contains an unspecified vulnerability in the clear_user_list function (src/main.c) that allows remote attackers to cause an application crash via crafted network traffic, due to memory corruption. The available sources do not specify affected subcomponents, versions beyond 0.3, exploit...

CVE-2006-6810: Undefined Security Weakness

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

DB Hub 0.3x clear_user_list() DoS

DB Hub 0.3x clearuserlist DoS The vulnerability is caused due to a memory corruption in src/main.c „clearuserlist“ function, which can be exploited to cause a DoS by sending specially crafted packet to a vulnerable system. Developers website: http://dbhub.ir.pl/ Original advisory:...

DB Hub memory corruption

Memory corruption on malformed request parsing...

DB Hub 0.3 - Remote Denial of Service

source: https://www.securityfocus.com/bid/21791/info A remote denial-of-service vulnerability affects the DB Hub application because of a memory-corruption flaw when the application attempts to process specially crafted network traffic. An attacker may exploit this issue to crash affected...

DB Hub 0.3 - Remote Denial of Service

DB Hub 0.3 - Remote Denial of Service source: https://www.securityfocus.com/bid/21791/info A remote denial-of-service vulnerability affects the DB Hub application because of a memory-corruption flaw when the application attempts to process specially crafted network traffic. An attacker may exploi...

Vulnerabilities в W-Agora

Здравствуйте 3APA3A! Сообщаю вам о найденных мною 22.11.2006 уязвимостях в W-Agora 4.1.5 = 4.1.5. Это Cross-Site Scripting, SQL DB Structure Extraction та Full path disclosure уязвимости. Уязвимости в скрипте search.php3. XSS:...

CVE-2006-6449: Undefined Security Weakness

Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from thir...

DEBIAN-CVE-2006-5705

Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the 1 backup and 2 fragment parameters in a GET request...

CVE-2006-5705: Undefined Security Weakness

Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the 1 backup and 2 fragment parameters in a GET request...

CVE-2006-5430

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5430

CVE-2006-5430 is an XSS vulnerability affecting db-central (dbc) Enterprise CMS and db-central CMS, exploitable through the search needle parameter. The core issue is a reflected/script injection in the search functionality, enabling remote attackers to inject arbitrary script/HTML. The CVSS v2 v...

CVE-2006-5432: Undefined Security Weakness

Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when registerglobals is enabled, allow remote attackers to create or overwrite arbitrary files via the 1 emailto, 2 emailfrom, 3 nameto, 4 namefrom, 5 picture, 6 comment, or 7 sessionID parameter, as...