TimeLive Time And Expense Tracking 4.1.1 Traversal / Disclosure

Exploit Title : TimeLive Time and Expense Tracking = Multiple Vulnerabilities Vulnerability : Directory Traversal / Remote Database Download / File Download / Source Code Disclosure Date : 28/09/2011 Author : Nathaniel Carew Impact : High Software Link :...

timelive time and expense tracking 4.1.1 - Multiple Vulnerabilities

Exploit Title : TimeLive Time and Expense Tracking = Multiple Vulnerabilities Vulnerability : Directory Traversal / Remote Database Download / File Download / Source Code Disclosure Date : 28/09/2011 Author : Nathaniel Carew Impact : High Software Link :...

BOSSI company(enterprises)website administrative system injection&upload exploit-vulnerability warning-the black bar safety net

BOSSI companyenterpriseswebsite administrative system,Chinese / English bilingual version,the background in same page within while management added modified information within OF in the English content,the website's left column using the module, you can freely increase&delete,can not modify the...

BOSSI company(enterprises)website administrative system thrilling variety of vulnerability-vulnerability warning-the black bar safety net

BOSSI companyenterpriseswebsite administrative system thrilling variety of vulnerabilities Vulnerability: injection vulnerability Vulnerability page: NewsInfo. asp, Vulnerability code: if not isEmptyrequest. QueryString"id" then id=request. QueryString"id" else id=1 end if Set rs = Server...

DimacCMS xs <=1.3 Multiple Vulnerability

Exploit for php platform in category web applications Title : DimacCMS xs Exploit : 1 http://localhost/path...

DimacCMS XS 1.3 SQL Injection / Database Disclosure

Title : DimacCMS xs Exploit : 1 http://localhost/path/SiteResources/Data/...

Improper access control

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

CVE-2009-5019

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

CVE-2009-5019

The CVE-2009-5019 entry describes a vulnerability in Web Wiz NewsPad where sensitive data is stored under the web root with insufficient access control, enabling remote attackers to directly download the database (NewsPad.mdb). Affected component is the NewsPad web application; the root cause is ...

CVE-2009-5019

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

CVE-2010-4145

Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb...

Improper access control

Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb...

CVE-2010-4145

CVE-2010-4145 concerns Kisisel Radyo Script, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the database sevvo/eco23.mdb via a direct request. The vulnerability is rooted in improper access controls exposing a database ...

Cilem Haber Information Disclosure Vulnerability

Cilem Haber is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Site Composer Essentials Database Disclosure

==================================================== Site Composer Essentials DB Download Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

Improper access control

KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/Krmdb.mdb...

CVE-2010-1736

KrM Haber 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/Krmdb.mdb...

CVE-2009-4825

8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for AppData/sb.mdb...

Improper access control

8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for AppData/sb.mdb...

Improper access control

Angelo-Emlak 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for veribaze/angelo.mdb...