Maxwebportal 1.30 - 'search.asp?Search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7837/info A number of vulnerabilities have been discovered in the MaxWebPortal. The issues that have been discovered include: MaxWebPortal 'search.asp' has been reported prone to a cross-site scripting vulnerability. An attacker may execute arbitrary scri...

Maxwebportal 1.30 - Remote Database Disclosure

source: https://www.securityfocus.com/bid/7837/info A number of vulnerabilities have been discovered in the MaxWebPortal. The issues that have been discovered include: MaxWebPortal 'search.asp' has been reported prone to a cross-site scripting vulnerability. An attacker may execute arbitrary scri...

Philboard /database/philboard.mdb Direct Request Database Disclosure

The remote host is running Philboard. It is possible to download the database of this server philboard.mdb and to obtain valuable information from it passwords, archives, and so on. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

MPCSoftWeb 1.0 - Database Disclosure

source: https://www.securityfocus.com/bid/7390/info MPCSoftWeb does not sufficiently secure the database file. It is possible for remote attackers to request the database file and gain access to sensitive information such as administrative credentials for the guestbook...

Web Wiz Forums wwforum.mdb Direct Request Database Disclosure

The remote server is running Web Wiz Site Forum, a set of ASP scripts to manage online forums. This release comes with a 'wwforum.mdb' database, usually located under 'admin', that contains sensitive information, such as the user passwords and emails. An attacker may use this flaw to gain...

Web Wiz Site News / Compulsive Media CNU5 news.mdb Direct Request Database Disclosure

The remote server is running Web Wiz Site News or Compulsive Media CNU5, a set of ASP scripts to manage a news website. This release comes with a 'news.mdb' database that contains sensitive information, such as the unencrypted news site administrator password and URLs to several news stories. An...