14 matches found
EUVD-2006-2944
Malware in sbrugna...
DMX FORUM 2.1a Configuration Disclosure
| Title : DMX FORUM v2.1a Config Disclosure Vulnerability | Author : indoushka | email : [email protected] | Dork : © DMX FORUM v2.1a | Tested on: windows 8.1 Français V.Pro | Bug : by pass | Download : scripts.toucharger.com/fiches/scripts/dmx-forum/3392.htm...
Improper access control
Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...
CVE-2006-2946
Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...
CVE-2006-2947
Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter...
CVE-2006-2946
CVE-2006-2946 affects Dmx Forum 2.1a, where the file path _includes/bd.inc is stored under the web root with insufficient access control. This allows remote attackers to access the database credentials (username and password). The NVD entry notes a network attack with low complexity and a partial...
CVE-2006-2947
CVE-2006-2947 affects Dmx Forum 2.1a. Remote attackers can obtain usernames/passwords via a direct request to pops/edit.php with a modified membre parameter. CVSS v2 score 5.0 (Medium) — Network, Low complexity, No authentication, Partial confidentiality impact. The provided documents do not incl...
CVE-2006-2946
Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...
CVE-2006-2946: Undefined Security Weakness
Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...
CVE-2006-2947: Undefined Security Weakness
Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter...
Dmx Forum <= 2.1a (edit.php) Remote Password Disclosure Exploit
Exploit for unknown platform in category web applications =============================================================== Dmx Forum ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header print...
Dmx Forum 2.1a - 'edit.php' Remote Password Disclosure
!/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header print...
Dmx Forum 2.1a - edit.php Remote Password Disclosure
Dmx Forum 2.1a - edit.php Remote Password Disclosure !/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub...
Dmx Forum <= 2.1a (edit.php) Remote Password Disclosure Exploit
No description provided by source. !/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: url memberid ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header...