RBlog 1.0 - 'admin.mdb' Remote Password Disclosure

Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01-01...

RBlog 1.0 - admin.mdb Remote Password Disclosure

RBlog 1.0 - admin.mdb Remote Password Disclosure Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01...

CVE-2006-6825

Calendar MX BASIC 1.0.2 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for calendar.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely fro...

CVE-2006-6825

CVE-2006-6825 affects Calendar MX BASIC 1.0.2 and earlier. The vulnerability arises because the application stores sensitive information under the web root with insufficient access control, enabling remote attackers to download the database (calendar.mdb) via a direct request. The records indicat...

CVE-2006-6825

Calendar MX BASIC 1.0.2 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for calendar.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely fro...

CVE-2006-6449

Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from thir...

CVE-2006-6449

Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from thir...

CVE-2006-6350

listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb...

Hacker network intrusion 1 4 can use the method-vulnerability warning-the black bar safety net

Upload vulnerabilitydoes not speak pS: if you see:Choose your file to upload re-uploador there is a“please login”, 8 0% there is a loophole! Sometimes the upload will not necessarily be successful,it is because Cookies are not the same. We will use WSockExpert made Cookies. Then use the DOMAIN...

CVE-2006-5316

registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat...

CVE-2006-5316

registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat...

CVE-2006-5316

The CVE-2006-5316 entry concerns registroTL storing sensitive data under the web root with insufficient access control, enabling remote retrieval of a database via /usuarios.dat. The available documents confirm the vulnerability is a web-access exposure affecting access to the data, with the CVSS...

CVE-2006-5197

PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 /pdshoppro.mdb, 2 /data/pdshoppro.mdb, or 3 /shoppro/data/pdshoppro.mdb...

CVE-2006-3780

Keyifweb Keyif Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 ANKET/anket.mdb, 2 HABER/keyifweb.mdb, 3 ASP/download.mdb, or 4 SAYAC/aktif.mdb in the database/A9S7G6ASD790...

CVE-2006-3780

Keyifweb Keyif Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 ANKET/anket.mdb, 2 HABER/keyifweb.mdb, 3 ASP/download.mdb, or 4 SAYAC/aktif.mdb in the database/A9S7G6ASD790...

vbulletinexploit.txt

vBulltein 3.5.4 exploit.....install path is open or not secure Discovered By M4k3 PLDsoft Security Team, www.pldsoft.com Remote : Yes Critical Level : Dangerous Affected software description : Application : vbulletin version : latest version 3.60 Release 4 URL : http://www.vbulletin.com Exploit:...

Improper access control

Katrien De Graeve a.shopKart 2.0 aka ashopKart20 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 admin/scart.mdb and possibly 2 admin/scart97.mdb...

CVE-2006-2823

Katrien De Graeve a.shopKart 2.0 aka ashopKart20 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 admin/scart.mdb and possibly 2 admin/scart97.mdb...

CVE-2006-2823

Katrien De Graeve a.shopKart 2.0 aka ashopKart20 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 admin/scart.mdb and possibly 2 admin/scart97.mdb...

CVE-2005-1426

Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb aka mdb-database/blog.msb...