CVE-2010-1391

Removed by vendor...

htmlArea v2.03 DB Download Vulnerability

Exploit for unknown platform in category web applications ======================================== htmlArea v2.03 DB Download Vulnerability ======================================== ======================================================================================== | Title : htmlArea v2.03 DB...

Sql injection

Multiple SQL injection vulnerabilities in FrontAccounting FA before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 admin/db/usersdb.inc, and various other .inc and .php files under 2 admin/, 3 dimensions/, 4 gl/, 5...

ocean12-database.txt

PouyaServer , [email protected] ---------------------------------------------------------- site : http://ocean12tech.com ---------------------------------------------------------- Products : Ocean12 Contact Manager Pro v1.02 Ocean12 Membership Manager Pro Ocean12 Poll Manager Pro v1.00 Ocean...

Upload directory traversal in Easy File Sharing 4.5

Luigi Auriemma Application: Easy File Sharing Web Server http://www.sharing-file.com Versions: = 4.5 Platforms: Windows Bugs: A upload directory traversal B download of database files C possibility of reading sensitive files Exploitation: remote Date: 07 Dec 2007 Author: Luigi Auriemma e-mail:...

The big data library default address-vulnerability warning-the black bar safety net

/data/dvbbs7. mdb Action Network Forum database /databackup/dvbbs7. mdb Action Network Forum database /bbs/databackup/dvbbs7. mdb Action Network Forum database /admin/data/qcdnnews. mdb green to create article management system database /data/qcdnnews. mdb green to create article management syste...

guppyDoS.txt

KAPDA New advisory Vendor: http://www.freeguppy.org Vulnerable: 0 && $tabcounter0/10 == intval$tabcounter0/10 WriteCounterDBSTATSBK, $tabcounter0; //functions.php function WriteCounter$fic,$Dat...

[KAPDA::#33] - GuppY <= 4.5.11 Remote DoS vulnerability

KAPDA New advisory Vendor: http://www.freeguppy.org Vulnerable: = 4.5.11 Bug: Destroy database files Remote DoS vulnerability Exploitation: Remote with browser Exploit: available Description: -------------------- GuppY is a web portal intentionaly designed to be easy to use for you, the final use...

Information disclosure

LetterMerger 1.2 stores user information in Access database files with insecure permissions, which allows local users to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2001-1567

CVE-2001-1567 affects IBM Lotus Domino Server up to 5.0.9a. A crafted HTTP request containing many "+" characters before a .nsf extension can cause Domino to convert pluses to spaces, allowing remote attackers to bypass security restrictions and view Notes database files and possibly sensitive No...

CVE-2001-1567

Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files .ntf via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by...

CVE-2004-1933

Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages...

CVE-2005-0700

The exportindex action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATKADMIN cookie...

CVE-2005-0700

The CVE-2005-0700 entry affects Aztek Forum 4.0, where the export_index action in myadmin.php can be exploited by remote attackers to obtain database files, potentially by setting the ATK_ADMIN cookie. The available description states the vulnerability allows access to database files and indicate...

CVE-2005-0700

The exportindex action in myadmin.php for Aztek Forum 4.0 allows remote attackers to obtain database files, possibly by setting the ATKADMIN cookie...

vpasp.txt

VP-ASP Shopping Cart Version 5.0 Google style by fris Finding VP-ASP 5.00 Sites in Google: In google type: intitle:VP-ASP Shopping Cart 5.00 You will find many websites with VP-ASP 5.00 cart software installed Now lets goto the exploit the page will be like this:...

CVE-2002-0922

CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to 1 default%2edb or 2 default%2edb.style, or remote authenticated users to perform administrative actions via 3 a database parameter set to default%2edb...

CVE-2002-0922

The CVE-2002-0922 issue affects the CGIScript.net csNews.cgi CGI script. It allows remote attackers to obtain database files (default.db and default.db.style) via direct URL-encoded requests, and also permits remote authenticated users to perform administrative actions when a database parameter i...

CVE-2001-0988

Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information...

permission probs with Arkeia

While working with the commercial version of Arkeia backup software I noticed it creates most of it's "database" files with the permissions of 666. This was version 4.2.8-2 of the server, and I had noticed this several updates ago, so it's been going on for some time. The database files are locat...