Information disclosure

A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain...

fetchmail/mutt/evolution/...: APOP password disclosure vulnerability

The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle MITM attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including 1 Thunderbird 1.x before 1.5.0.12 and...

Design/Logic Flaw

DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid newsid parameter, and other unspecified vectors, which reveal the path in various error messages...

DGNews version 2.1 Path Disclosure Vulnerability

netVigilance Security Advisory 21 DGNews version 2.1 Path Disclosure Vulnerability Description: DGNews is small and simple but powered news publishing. Easy installation, no programing required. But you can still change whatever you want for advanced users. Features: add unlimited categories,...

JChit counter 1.0.0 - imgsrv.php?ac Remote File Disclosure

JChit counter 1.0.0 - imgsrv.php?ac Remote File Disclosure Y! Underground Group http://2600.ir -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=- Portal.......: jchit counter v1.0.0 Download.....:...

cattaDoc 2.21 (download2.php fn1) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== cattaDoc 2.21 download2.php fn1 Remote File Disclosure Vulnerability ====================================================================== cattaDoc 2.21download2.php...

w-agora version 4.2.1 Information Disclosure Vulnerability

netVigilance Security Advisory 15 w-agora version 4.2.1 Information Disclosure Vulnerability Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. It is possible to disclose...

Pagesetter for PostNuke index.php id Parameter Traversal Arbitrary File Access

The third-party Pagesetter module for PostNuke installed on the remote host fails to sanitize input to the 'id' parameter before using it to display a file in the function 'pagesetterfilepreview' of the script 'pnfile.php'. An unauthenticated attacker can exploit this issue to view arbitrary file...

UploadScript <=- v1.02 (password.txt) Remote Password Disclosure Vulnerability

UploadScript =- v1.02 password.txt Remote Password Disclosure Vulnerability Script: UploadScript Version: v1.02 URL: http://www.uploadscript.net/demo/download.php?file=1478fb6c5c807cdf12dd69410e14d66d Found By : BorN To K!LL Explo!T:. ^^^^^ www.site.com/path/password.txt GreeTz :. Dr.2 , Asbmay ,...

EasyNews PRO News Publishing 4.0 - Password Disclosure

= EasyNews PRO News Publishing 4.0 Remote Password Disclosure Vulnerability Affected Software: Easy News 4.0 PRO = Risk: Critical = Download: http://www.stphp.com/scripts/EasyNewsPRO40.zip = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greets: str0ke, crashovernight, TheJT, Kacper Usage:...

Php/Mysql Site Builder 0.0.2 (htm2php.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Php/Mysql Site Builder 0.0.2 htm2php.php File Disclosure Vulnerability ======================================================================== PHPBuilder v0.0.2 Remo...

P-News 2.0 - user.txt Remote Password Disclosure

P-News 2.0 - user.txt Remote Password Disclosure P-News V² - user.txt Information Disclosure Vulnerability Critical Level : Dangerous Script Download: http://download.planerd.net/dir/php Bugfounder: Lu7k Contact Me : www.school-of-hack.de or [email protected]...

Cahier de texte V2.0 SQL Code Execution Exploit

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/ Poc.link........

Cahier de texte 2.0 - Database Backup Source Disclosure

Cahier de texte 2.0 - Database Backup Source Disclosure !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..:...

Cahier de texte 2.0 (Database Backup/Source Disclosure) Remote Exploit

Exploit for unknown platform in category web applications ====================================================================== Cahier de texte 2.0 Database Backup/Source Disclosure Remote Exploit ====================================================================== !/usr/bin/perl INFORMATIONS...

Easy File Sharing Web Server Crafted Request ADS Arbitrary File Access

The version of Easy File Sharing Web Server that is installed on the remote host fails to restrict access to files via alternative data streams. By passing a specially crafted request to the web server, an attacker may be able to access privileged information. This script was written by Justin...

7 php scripts File Inclusion / Source disclosure Vuln

Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...

CMtextS <= 1.0 (users_logins/admin.txt) Credentials Disclosure Vuln

No description provided by source. ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++...

Information disclosure

A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability...

TFT Gallery 0.10 - Password Disclosure

TFT Gallery 0.10 - Password Disclosure !/usr/bin/perl Copyright C undefined1 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option a...