Improper access control

The Net Guys ASPired2poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing the username and password via a direct request to ASPired2poll.mdb...

CVE-2008-6147

ForumApp 3.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/8690.mdb or 2 data/8690BAK.mdb...

ClearBudget 0.6.1 (Misspelled htaccess) Insecure DD Vulnerability

No description provided by source. + ClearBudget v0.6.1 Insecure Database Download + Discovered By Room-Hacker Ex : http://site.il/db/budget.sqlite Demo : http://clearbudget.douteaud.com/demo/0-6-1//db/budget.sqlite...

ClearBudget 0.6.1 (Misspelled htaccess) Insecure DD Vulnerability

Exploit for unknown platform in category web applications ================================================================= ClearBudget 0.6.1 Misspelled htaccess Insecure DD Vulnerability ================================================================= + ClearBudget v0.6.1 Insecure Database...

CVE-2008-6008

hyBook Guestbook Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for hyBook.mdb...

CVE-2008-5980

Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb...

CVE-2008-5981

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 poll.mdb or 2 poll97.mdb...

Improper access control

Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb...

CVE-2008-5981

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 poll.mdb or 2 poll97.mdb...

CVE-2008-5981

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, allowing remote attackers to download a database via direct requests to poll.mdb or poll97.mdb. Affected component: PacPoll 4.0 web files; root cause: improper access restrictions leading to exposure of ...

CVE-2008-5980

Ocean12 Mailing List Manager Gold stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for o12mail.mdb...

Improper access control

Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for database/topsites.mdb...

Yerba SACphp <= 6.3 Multiple Remote Vulnerabilities

No description provided by source. ====================================================== Yerba SACphp = 6.3 Multiple Remote Vulnerabilities ====================================================== ? Discovered By StAkeR - StAkeRathotmaildotit ? Discovered On 07/10/2008 ?...

Yerba SACphp 6.3 - Multiple Vulnerabilities

Yerba SACphp 6.3 - Multiple Vulnerabilities ====================================================== Yerba SACphp = 6.3 Multiple Remote Vulnerabilities ====================================================== ? Discovered By StAkeR - StAkeRathotmaildotit ? Discovered On 07/10/2008 ?...

Yerba SACphp <= 6.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================== Yerba SACphp = 6.3 Multiple Remote Vulnerabilities =================================================== ====================================================== Yerba SACphp = 6.3 Multiple...

yerba-multi.txt

====================================================== Yerba SACphp = 6.3 Multiple Remote Vulnerabilities ====================================================== ? Discovered By StAkeR - StAkeRathotmaildotit ? Discovered On 07/10/2008 ?...

BandSite CMS 1.1.4 (Download Backup/XSS/CSRF) Remote Vulnerabilities

No description provided by source. + BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN + Arbitrary Download Database Go to http://localhost/Path/adminpanel/phpmydump.php and the...

shoutbox Remote Database Dawnload Exploit

shoutbox Remote Database Dawnload Exploit Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| HomePage : http://gh0st10.wordpress.com | o/ o | My Email : [email protected] |/ / | Name Script : shoutbox Download :...

CVE-2008-2873

sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request to Db/urun.mdb...

Improper access control

sHibby sHop 2.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request to Db/urun.mdb...