CVE-2006-5197

PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 /pdshoppro.mdb, 2 /data/pdshoppro.mdb, or 3 /shoppro/data/pdshoppro.mdb...

CVE-2006-5197: Undefined Security Weakness

PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 /pdshoppro.mdb, 2 /data/pdshoppro.mdb, or 3 /shoppro/data/pdshoppro.mdb...

CVE-2006-3780

Keyifweb Keyif Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 ANKET/anket.mdb, 2 HABER/keyifweb.mdb, 3 ASP/download.mdb, or 4 SAYAC/aktif.mdb in the database/A9S7G6ASD790...

CVE-2006-3780

Keyifweb Keyif Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 ANKET/anket.mdb, 2 HABER/keyifweb.mdb, 3 ASP/download.mdb, or 4 SAYAC/aktif.mdb in the database/A9S7G6ASD790...

CVE-2006-3780: Undefined Security Weakness

Keyifweb Keyif Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 ANKET/anket.mdb, 2 HABER/keyifweb.mdb, 3 ASP/download.mdb, or 4 SAYAC/aktif.mdb in the database/A9S7G6ASD790...

vbulletinexploit.txt

vBulltein 3.5.4 exploit.....install path is open or not secure Discovered By M4k3 PLDsoft Security Team, www.pldsoft.com Remote : Yes Critical Level : Dangerous Affected software description : Application : vbulletin version : latest version 3.60 Release 4 URL : http://www.vbulletin.com Exploit:...

Improper access control

Katrien De Graeve a.shopKart 2.0 aka ashopKart20 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 admin/scart.mdb and possibly 2 admin/scart97.mdb...

CVE-2006-2823

Katrien De Graeve a.shopKart 2.0 aka ashopKart20 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 admin/scart.mdb and possibly 2 admin/scart97.mdb...

CVE-2006-2823

Katrien De Graeve a.shopKart 2.0 aka ashopKart20 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 admin/scart.mdb and possibly 2 admin/scart97.mdb...

CVE-2005-1426

Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb aka mdb-database/blog.msb...

CVE-2005-1425

Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb...

CVE-2005-1425

Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb...

CVE-2005-1425: Undefined Security Weakness

Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb...

CVE-2005-1426: Undefined Security Weakness

Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb aka mdb-database/blog.msb...

ASPRunner Multiple Vulnerabilities

------------------------------------------------------ ASPRunner Multiple Vulnerabilities ------------------------------------------------------ Online URL : http://ferruh.mavituna.com/article/?574 1 SQL Injection; Severity : Moderatly Critical 2 Information Disclosure; Severity : Low Critical 3...

Philboard Forum Vulnerability

Philboard Vulnerability Severity : High Possible gain administrator/users access on Forum Board Systems Affected: Philboard up to v1.14 Vendor URL: http://www.youngpip.com/philboard.asp Vuln Type : Cookie Injection Status : Vendor contacted, fixed version is not available cause they didn't respon...