Jfinal cms backend has arbitrary file read vulnerability

Jfinal cms uses JFinal as a web framework , template engine with beetl, database with mysql, front-end bootstrap, flat ui and other frameworks. Jfinal cms backend exists arbitrary file read vulnerability. Attackers can use the vulnerability to read the database configuration file...

WordPress Nishizawa_Tmp Themes Database Profile Download Vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A database configuration file download vulnerability exists in WordPress NishizawaTmp Themes, which can be exploited by an attacker to download arbitrary files...

Arbitrary File Read Vulnerability in iWebShop

iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source mall system . The system is divided into front-end , back-office and merchant . iWebShop arbitrary file read vulnerability , an attacker can use the...

Zend Framework 1.11.11 Database Configuration Disclosure

Exploit Title : Zend Framework 1.11.11 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : zend.com Software Download Link : zend.com/en/company/community/framework/downloads Software Information Link :...

ph7CMS Social Dating Community 14.8 Database Configuration Disclosure

Exploit Title : ph7CMS Social Dating Community 14.8 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : ph7cms.com Software Download Link : ph7cms.com/social-dating-features/...

Invo PhalconPHP 1.x Database Configuration Disclosure

Exploit Title : Unvo PhalconPHP 1.x Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phalconphp.com Software Download Link : github.com/phalcon/invo/archive/master.zip Software Information Link :...

ZRECore 1.3.1 Database Configuration Disclosure

Exploit Title : ZRECore 1.3.1 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : zend.com Software Download Link : github.com/zrecore/ZRECore/archive/master.zip Software Information Link :...

Ispirithalaya Hospital Management System 0.1.2 Database Configuration Disclosure

Exploit Title : Ispirithalaya Hospital Management System 0.1.2 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : freeehospital.com Software Download Link :...

Zend Framework ZF1 1.x Database Configuration Disclosure

Exploit Title : Zend Framework ZF1 1.x Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : zend.com Software Download Link : github.com/RalfEggert/zf1example/archive/master.zip Software Information Link :...

CVE-2017-1286

Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147...

CVE-2018-9327

Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to execute arbitrary code on the server. The instance has to be configured to use a document database DirtyDB, CouchDB, MongoDB, or RethinkDB...

CVE-2018-9327

Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to execute arbitrary code on the server. The instance has to be configured to use a document database DirtyDB, CouchDB, MongoDB, or RethinkDB...

WEM Admin Console Error: "Specified Infrastructure Server seems to be offline or have a wrong database configuration. Please check configuration and try again"

After performing in-place upgrade of the WEM Broker, The WEM Admin console gives the following error when trying to connect to the WEM site:. "Specified Infrastructure Server seems to be offline or have a wrong database configuration. Please check configuration and try again" Plus, when opening t...

Command Execution Vulnerability Due to Improper Filtering of Database Configuration File in MetInfo Version 5.3.18

MetInfo is a Content Management System CMS developed using PHP and Mysql. A security vulnerability exists in the backend of MetInfo version 5.3.18. The vulnerability is due to improper filtering of the database configuration file during program reinstallation, resulting in malicious code that can...

CVE-2016-7508

Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a certain character when the database is configured to use Big5 Asian encoding...

PHPCMS v9.5.10 suffers from a design vulnerability

PHPCMS is a website management software. The software adopts modular development and supports a variety of classification methods, using it can easily realize the design, development and maintenance of personalized websites. A design vulnerability exists in PHPCMS v9.5.10, which allows an attacke...

Version string portion was too short or too long

The article describes additional Veeam ONE database configuration required after deploying it manually...

New Relic: Sensitive information disclosure

I am able to download ciritcal files which include newrelic environment setup, setting uo of database which also says which database is used etc. I am able to access this information using a google dork Google dork:site:newrelic.com ext:doc | ext:docx | ext:odt | ext:pdf | ext:rtf | ext:sxw |...

TeamPass Passwords Management System 2.1.26 - Arbitrary File Download

ADVISORY INFORMATION ======================================== Title: TeamPass Passwords Management System via Unauth File Download and Arbitrary File Download Application: TeamPass Passwords Management System Class: Sensitive Information disclosure Remotely Exploitable: Yes Versions Affected:...

Tiki Wiki CMS 15.0 - Arbitrary File Download

Exploit for php platform in category web applications Exploit Title: Tiki Wiki CMS 15.0 Arbitrary File Download Date: 11-07-2016 Software Link: https://tiki.org Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1...