CVE-2008-7063

Ocean12 FAQ Manager Pro stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for admin/o12faq.mdb...

EZNewsletter 3 Database Disclosure

!/usr/bin/perl Application Name : EZNewsletter V3 Vulnerable Type : Arbitrary Database Disclosure Vulnerability Infection : Admins Database Download Script Downlaod : http://www.htmljunction.com/eznewsletterv3.zip author : Septemb0x Greetz BHDR, BARCOD3 use lwp::UserAgent; system'cls'; system'tit...

Messages Library 2.0 Insecure Cookie Handling Vulnerability

No description provided by source. Messages Library 2.0 = Arbitrary Database Download Vulnerability Founded & Exploited by : Stack Bypass with javascript:document.cookie = "SaphpLessonName=admin' or 1=1--; path=/"; javascript:document.cookie = "SaphpLessonPassword=' or 1=1--; path=/"; After Exec...

Messages Library 2.0 Insecure Cookie

Messages Library 2.0 = Arbitrary Database Download Vulnerability Founded & Exploited by : Stack Bypass with javascript:document.cookie = "SaphpLessonName=admin' or 1=1--; path=/"; javascript:document.cookie = "SaphpLessonPassword=' or 1=1--; path=/"; After Exec http://localhost/sms/admin/backup.p...

Messages Library 2.0 - Insecure Cookie Handling

Messages Library 2.0 - Insecure Cookie Handling Messages Library 2.0 = Arbitrary Database Download Vulnerability Founded & Exploited by : Stack Bypass with javascript:document.cookie = "SaphpLessonName=admin' or 1=1--; path=/"; javascript:document.cookie = "SaphpLessonPassword=' or 1=1--; path=/"...

Messages Library 2.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =========================================================== Messages Library 2.0 Insecure Cookie Handling Vulnerability =========================================================== Messages Library 2.0 = Arbitrary Database Download...

Messages Library 2.0 - Insecure Cookie Handling

Messages Library 2.0 = Arbitrary Database Download Vulnerability Founded & Exploited by : Stack Bypass with javascript:document.cookie = "SaphpLessonName=admin' or 1=1--; path=/"; javascript:document.cookie = "SaphpLessonPassword=' or 1=1--; path=/"; After Exec http://localhost/sms/admin/backup.p...

CVE-2009-1495

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb...

Improper access control

Web File Explorer 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/db.mdb...

For the guestbook vulnerability discovery-vulnerability warning-the black bar safety net

Guestbook of a single function, generally for the ordinary viewer only message function. And for the administrator function of how much is written on the guestbook of the optimization. Generally the administrator has to reply to a message edit a message delete a message there are websites users t...

Improper access control

ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb...

CVE-2008-6580

The RedReservations script for ColdFusion stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request to 1 makered.mdb and 2 makered97.mdb...

CVE-2008-6580

The RedReservations script for ColdFusion stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request to 1 makered.mdb and 2 makered97.mdb...

CVE-2009-1053

chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv...

CVE-2008-6493

Easy Content Management Publishing stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database/News.mdb...

Search editor vulnerability-vulnerability warning-the black bar safety net

site:editor inurl:asp? id inurl:ewebeditornet Such as the common editor of the vulnerability are: ewebeditor ewebeditornet fckeditor editor southidceditor SouthidcEditor bigcneditor A:ewebeditor is an example 1:default download down the back: http://www.test.com/ewebeditor/adminlogin.asp Backgrou...

CVE-2009-0866

pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php...

Improper access control

pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php...

CVE-2009-0866

pHNews Alpha 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for extra/genbackup.php...

CVE-2008-6354

The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2poll.mdb...