Pixie CMS 1.0 - Multiple Local File Inclusions

Pixie CMS 1.0 - Multiple Local File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-09-005 Application: Pixie CMS Versions Affected: 1.0 Vendor URL: http://www.getpixie.co.uk/ Bug: Multiple Local File Include Exploits: YES Reported: 29.08.2008 Vendor Response: 30.08.2008 Solutio...

Pixie CMS 1.0 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Pixie CMS 1.0 Multiple Local File Inclusion Vulnerabilities =========================================================== Digital Security Research Group DSecRG Advisory DSECRG-09-0...

CVE-2009-0249

The CVE-2009-0249 entry concerns Katy Whitton RankEm, where sensitive information is stored under the web root with insufficient access control. A remote attacker can directly request database/topsites.mdb and obtain a credentials-containing database. The underlying issue is improper access contr...

CVE-2008-5932

The CVE refers to CodeAvalanche FreeForum with an improper access control flaw that exposes the web root _private/CAForum.mdb, allowing remote attackers to download the database file containing passwords. The affected component is the forum software; the underlying cause is insufficient access co...

CVE-2008-5925

ASP-Dev XM Events Diary has a partial-access control weakness that exposes the diary.mdb database under the web root, allowing remote retrieval via a direct request. Affected component is the diary database/file handling within the web app; underlying issue is insufficient access control leading ...

Active Bids

--------------------------------------------------------- Portal Name: Active Bids Vendor : http://www.activewebsoftwares.com/P84ActiveBids.aspx?Tabopen=1 Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL/XSS...

Blog Manager - 'ItemID' SQL Injection

source: https://www.securityfocus.com/bid/33314/info DMXReady Blog Manager is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal...

Digital Security Research Group [DSecRG] Advisory #DSECRG-09-003

Digital Security Research Group DSecRG Advisory DSECRG-09-003 Application: Oracle database 11G Versions Affected: Oracle 11.1.0.6 and 10.2.0.1 Vendor URL: http://oracle.com Bugs: PL/SQL Injections Exploits: YES Reported: 17.11.2008 Vendor response: 18.11.2008 Last response: 24.11.2008 Date of...

Establish a remote connection for the root user-bug warning-the black bar safety net

The following statement has the ROOT user the same permissions. Everyone in the holding station should come across. the root user of mysql, you can only locally connected, the external refuse the connection. The following methods can help you solve this problem, the following statements function...

CVE-2008-5885

The CVE-2008-5885 entry concerns Net Guys ASPired2Quote, where sensitive data is stored under the web root with insufficient access control. A remote attacker can directly request admin/quote.mdb and download the database file containing usernames and passwords, exposing partial confidentiality. ...

CVE-2008-5900

CodeAvalanche Articles stores sensitive information under the web root with insufficient access control, enabling remote attackers to download the database file CAArticles.mdb via a direct request to _private/CAArticles.mdb. Affected component: the web-accessible data store of CodeAvalanche Artic...

CVE-2008-5847

CVE-2008-5847 affects Constructr CMS up to version 3.02.5, where passwords are stored in cleartext in a MySQL database. The underlying issue is insecure password storage (cleartext in the hash column), enabling context-dependent attackers to read sensitive password information from the database. ...

CVE-2008-5597

CVE-2008-5597 affects Cold BBS, where sensitive data is stored under the web root with insufficient access control. The vulnerability allows remote attackers to directly download the database file (db/cforum.mdb), exposing stored information. The available sources describe the issue and confirm t...

CVE-2008-5572

CVE-2008-5572 pertains to Professional Download Assistant 0.1, where sensitive data is stored under the web root with insufficient access control. The description states that an attacker can download the database file (database/downloads.mdb) via a direct request, indicating exposure of stored da...

Live Chat Component for Joomla! 'last' Parameter Multiple SQLi

The version of the Live Chat component for Joomla! running on the remote host is affected by multiple SQL injection vulnerabilities in getChat.php and getSavedChatRooms.php due to improper sanitization of user-supplied input to the 'last' parameter before using it to construct database queries...

CVE-2008-5328

The CVE-2008-5328 entry concerns the ClearQuest Maintenance Tool in IBM Rational ClearQuest before version 7. It states that the product stores the database password in cleartext inside an object in a ClearQuest connection profile or export file, enabling remote authenticated users to retrieve th...

ASP User Engine .NET - Remote Database Disclosure

ASP User Engine .NET - Remote Database Disclosure -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisia Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact :...

Z1Exchange 1.0 - id Cross-Site Scripting

Z1Exchange 1.0 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/32598/info Z1Exchange is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacke...

Pilot Group PG Roommate Finder Solution - SQL Injection

Pilot Group PG Roommate Finder Solution - SQL Injection source: https://www.securityfocus.com/bid/32430/info Pilot Group PG Roommate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_IPUBLISH.ALTER_HOTLOG_INTERNAL_CSOURCE

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Oracle Database SQL Injection in SYS.DBMSCDCIPUBLISH.ALTERHOTLOGINTERNALCSOURCE November 12, 2008 Risk Level: Medium Affected versions: Oracle Database Server versions 10gR1, 10gR2 and 11gR1 Remote exploitable: Yes...