Host Directory PRO 2.1.0 - Remote Database Backup

Host Directory Pro Bypass & Backup DB Disc. Multiple Vulns. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 28/03/09 Home: yildirimordulari.com / z0rlu.blogspot.com / www.experl.com / woltaj.org N0T: Herkes Hecker Olmus :S N0T: New...

Host Directory PRO - Cookie Security Bypass

Host Directory PRO - Cookie Security Bypass source: https://www.securityfocus.com/bid/28863/info Host Directory PRO is prone to a security-bypass vulnerability because it fails to properly validate user credentials before performing certain actions. Exploiting this issue may allow an attacker to...

Host Directory PRO - Cookie Security Bypass

source: https://www.securityfocus.com/bid/28863/info Host Directory PRO is prone to a security-bypass vulnerability because it fails to properly validate user credentials before performing certain actions. Exploiting this issue may allow an attacker to bypass certain security restrictions and gai...

CVE-2006-6804

CVE-2006-6804 affects Dragon Business Directory - Pro (aka Dragon Internet Business Search Directory - Pro) and is due to an SQL injection in bus_details.asp. The vulnerability is exploitable via the ID parameter in versions 3.01.12 and earlier. Impacted data can be partially disclosed or corrupt...

CVE-2006-6804: Undefined Security Weakness

SQL injection vulnerability in busdetails.asp in Dragon Business Directory - Pro aka Dragon Internet Business Search Directory - Pro 3.01.12 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-5905

Web Directory Pro allows remote attackers to 1 backup the database and obtain the backup via a direct request to admin/backupdb.php or 2 modify configuration via a direct request to admin/options.php...

CVE-2006-5905

Web Directory Pro allows remote attackers to 1 backup the database and obtain the backup via a direct request to admin/backupdb.php or 2 modify configuration via a direct request to admin/options.php...

CVE-2006-5905

Web Directory Pro is affected by CVE-2006-5905. The vulnerability allows remote attackers to perform two unauthorized actions via direct requests to admin/backup_db.php and admin/options.php: (1) backup the database and obtain the backup file, and (2) modify configuration. The CVSS metrics indica...

CVE-2006-5905: Undefined Security Weakness

Web Directory Pro allows remote attackers to 1 backup the database and obtain the backup via a direct request to admin/backupdb.php or 2 modify configuration via a direct request to admin/options.php...

Web Directory Pro bypass Vulnerabilities

Web Directory Pro is product of hostingfrenzy.com I check latest version and detect some security holes, attackers can backup database or re-config system: 1. Backup database: http://domain/path/admin/backupdb.php 2. Re-config system: http://domain/path/admin/options.php Note: If IE cannot downlo...

CVE-2001-0780

Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. dot dot in the SHOW parameter...

CVE-2001-0780

CVE-2001-0780 is a directory traversal vulnerability in Cosmicperl Directory Pro 2.0 affecting the directorypro.cgi (Cosmicpro.cgi) component. The SHOW parameter can be exploited with a .. sequence to disclose sensitive information. Affected product/version: Cosmicperl Directory Pro 2.0; vulnerab...

CVE-2001-0780

Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. dot dot in the SHOW parameter...

CVE-2001-0780: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. dot dot in the SHOW parameter...

Directory Pro Traversal Arbitrary File Access

The CGI 'directorypro.cgi' is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the HTTP daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...