EZsite Forum Discloses Passwords to Remote Users - Active Check

The remote host is running EZsite Forum. It is reported that this software stores usernames and passwords in plaintext form in the SPDX-FileCopyrightText: 2005 deepquest Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Comersus Cart /comersus/database/comersus.mdb Direct Request Datbase Disclosure

The remote host appears to be running Comersus Cart, an ASP shopping cart application. The version of Comersus Cart installed on the remote host fails to restrict access to its customer database, which contains order information, passwords, credit card numbers, etc. Further, the data in all...

Comersus Backoffice 4.x/5.0/6.0 - '/comersus/database/comersus.mdb' Direct Request Database Disclosure

source: https://www.securityfocus.com/bid/15251/info Comersus BackOfficePlus and BackOfficeLite are prone to multiple input validation and information disclosure vulnerabilities. The applications are prone to SQL injection attacks, information disclosure and multiple cross-site scripting attacks...

FunkBoard V0.66CF (possibly prior versions) cross site scripting, possible database username/password disclosure & board takeover,possible remote code execution

FunkBoard V0.66CF possibly prior versions cross site scripting, possible database username/password disclosure & board takeover, possible remote code execution software: author site: http://www.pathtofunkboard.co.uk/ xss:...

Jax PHP Scripts 1.0/1.34/2.14/3.31 - jnl_records User Database Disclosure

source: https://www.securityfocus.com/bid/14482/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script...

Keyvan1 ImageGallery - Database Disclosure

source: https://www.securityfocus.com/bid/13630/info Keyvan1 ImageGallery is prone to an access validation vulnerability that could allow the underlying database to be downloaded. http://www.example.com/path/image.mdb...

betaParticle.txt

BetaParticle bp is a ASP CMS Blog + Gallery . I found 2 vulnerabilities in BetaParticle. http://example.com/bp : is BP path ! 1 BP Database Disclosure For version = 3.0 Database path : http://example.com/Blog.mdb And BP path must be : http://example.com/bp/ you can download it and disclose the...

2 vulnerabilities in BetaParticle

BetaParticle bp is a ASP CMS Blog + Gallery . I found 2 vulnerabilities in BetaParticle. http://example.com/bp : is BP path ! 1 BP Database Disclosure For version 3.0 Database path : http://example.com/bp/database/dbBlogMX.mdb you can download it and disclose the administrator username and passwo...

BetaParticle blog 2.03.0 - dbBlogMX.mdb Direct Request Database Disclosure

BetaParticle blog 2.03.0 - dbBlogMX.mdb Direct Request Database Disclosure source: https://www.securityfocus.com/bid/12861/info betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported: It is reported that betaparticle blog fails to sufficientl...

BetaParticle blog 2.0/3.0 - dbBlogMX.mdb Direct Request Database Disclosure

source: https://www.securityfocus.com/bid/12861/info betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported: It is reported that betaparticle blog fails to sufficiently secure the authentication credential database. A remote attacker may...

[SA14580] aeNovo Database Disclosure of Sensitive Information

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

Compulsive Media CNU5 - News.mdb Database Disclosure

Compulsive Media CNU5 - News.mdb Database Disclosure source: https://www.securityfocus.com/bid/11004/info CNU5 is reported prone to a database disclosure vulnerability. It is reported that remote users may download the database file 'news.mdb' and gain access to sensitive information including...

Compulsive Media CNU5 - 'News.mdb' Database Disclosure

source: https://www.securityfocus.com/bid/11004/info CNU5 is reported prone to a database disclosure vulnerability. It is reported that remote users may download the database file 'news.mdb' and gain access to sensitive information including unencrypted authentication credentials. CNU5 version 1....

ZixForum ZixForum.mdb DIrect Request Database Disclosure

The remote server is running ZixForum, a set of ASP scripts for a web-based forum. This program uses a database named 'ZixForum.mdb' that can be downloaded by any client. This database contains discussions, account information, etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Zixforum - ZixForum.mdb Database Disclosure

Zixforum - ZixForum.mdb Database Disclosure source: https://www.securityfocus.com/bid/10982/info Zixforum is reported prone to a database disclosure vulnerability. It is reported that remote users may download the database file ''ZixForum.mdb' and gain access to sensitive information including...

Zixforum - ZixForum.mdb Database Disclosure

source: https://www.securityfocus.com/bid/10982/info Zixforum is reported prone to a database disclosure vulnerability. It is reported that remote users may download the database file ''ZixForum.mdb' and gain access to sensitive information including unencrypted authentication credentials. All...

NewsTraXor Website Management Script 2.9 Beta - Database Disclosure

source: https://www.securityfocus.com/bid/10194/info Reportedly NewsTraXor is affected by a remote database disclosure vulnerability. This issue is due to a design error that allows the database file to be globally readable. This issue may allow a remote attacker to gain unauthorized administrati...

NewsTraXor Website Management Script 2.9 Beta - Database Disclosure

NewsTraXor Website Management Script 2.9 Beta - Database Disclosure source: https://www.securityfocus.com/bid/10194/info Reportedly NewsTraXor is affected by a remote database disclosure vulnerability. This issue is due to a design error that allows the database file to be globally readable. This...

Maxwebportal 1.30 - search.asp?Search Cross-Site Scripting

Maxwebportal 1.30 - search.asp?Search Cross-Site Scripting source: https://www.securityfocus.com/bid/7837/info A number of vulnerabilities have been discovered in the MaxWebPortal. The issues that have been discovered include: MaxWebPortal 'search.asp' has been reported prone to a cross-site...

Maxwebportal 1.30 - Remote Database Disclosure

Maxwebportal 1.30 - Remote Database Disclosure source: https://www.securityfocus.com/bid/7837/info A number of vulnerabilities have been discovered in the MaxWebPortal. The issues that have been discovered include: MaxWebPortal 'search.asp' has been reported prone to a cross-site scripting...