Authentication flaw

HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to admin/backup/db...

Authentication flaw

Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to admin/backupdb.php...

CVE-2008-7008

HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to admin/backup/db...

CVE-2008-7008

HyperStop Web Host Directory 1.2 allows remote attackers to bypass authentication and download a database backup via a direct request to admin/backup/db...

CVE-2008-7006

The CVE-2008-7006 entry affects Free PHP VX Guestbook 1.06. A vulnerability in admin/backupdb.php allows remote attackers to bypass authentication and download the database backup directly, exposing data without requiring login. The cited sources describe the issue and its impact as authenticatio...

CVE-2008-7006

Free PHP VX Guestbook 1.06 allows remote attackers to bypass authentication and download a backup of the database via a direct request to admin/backupdb.php...

CVE-2008-7008

CVE-2008-7008 affects HyperStop Web Host Directory 1.2. The vulnerability allows remote attackers to bypass authentication and download a database backup by issuing a direct request to admin/backup/db. The available documentation does not provide exploit specifics beyond this access path, nor det...

asaher pro 1.0.4 Database Backup

::::::::::::::::::::::::::::::::::::::: found by alnjm33 my site : http://sec-war.com/cc/ mail:alnjm33athotmail.com :::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::::::::::Re: asaher pro v1.0.4 Remote Database Backup Vulnerability::::::::::::::::::::::::::: expolit:...

asaher pro 1.0.4 - Remote Database Backup

asaher pro 1.0.4 - Remote Database Backup ::::::::::::::::::::::::::::::::::::::: found by alnjm33 my site : http://sec-war.com/cc/ mail:alnjm33athotmail.com :::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::::::::::Re: asaher pro v1.0.4 Remote Database Backup...

asaher pro 1.0.4 Remote Database Backup Vulnerability

No description provided by source. ::::::::::::::::::::::::::::::::::::::: found by alnjm33 my site : http://sec-war.com/cc/ mail:alnjm33athotmail.com :::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::::::::::Re: asaher pro v1.0.4 Remote Database Backup...

asaher pro 1.0.4 - Remote Database Backup

::::::::::::::::::::::::::::::::::::::: found by alnjm33 my site : http://sec-war.com/cc/ mail:alnjm33athotmail.com :::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::::::::::Re: asaher pro v1.0.4 Remote Database Backup Vulnerability::::::::::::::::::::::::::: expolit:...

asaher pro 1.0.4 Remote Database Backup Vulnerability

Exploit for unknown platform in category web applications ===================================================== asaher pro 1.0.4 Remote Database Backup Vulnerability ===================================================== ::::::::::::::::::::::::::::::::Re: asaher pro v1.0.4 Remote Database Backup...

Improper access control

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db...

CVE-2008-6940

CVE-2008-6940 affects TurnkeyForms Web Hosting Directory. The vulnerability stems from insufficient access control that allows remote attackers to access sensitive data stored under the web root, specifically enabling retrieval of a database backup via a direct request to admin/backup/db. The con...

News website management system vulnerability-vulnerability warning-the black bar safety net

News website management system vulnerabilities author: xk8888888 This system has N of the Year Edition,General government, schools and enterprises with much more, Special permit: to display news NewsView. asp? NewsID= Login login. asp? id=3,The main special permit is available one has a EDIT the...

Alternative get 94kk Forum administrator password to get the shell-vulnerability warning-the black bar safety net

Excerpt from: Qglfnt's Blog Not much to say, directly into the topic. Can to on Google to the“Powered by 94kk 2.1.0”this is 94KKBBS the latest edition, as a keyword search. Just find a forum, click on“login”in the login do not fill in the user name and password, but directly click on the“Forgot...

Design/Logic Flaw

backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/...

TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities

No description provided by source. waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web:...

TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities ========================================================== waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader...

TorrentTrader Classic 1.09 SQL Injection

waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...