310 matches found
Smart PHP Subscriber Disclosure
----------------------------------------------------------------------------------------------- Title: Smart PHP Subscriber Multiple Disclosure Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...
CVE-2008-6160: Undefined Security Weakness
Semantically-Interconnected Online Communities SIOC 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, does not properly implement menu and database APIs, which allows remote attackers to obtain usernames and read hashed emails and comments via unspecified vectors...
pHNews Alpha 1 - genbackup.php Database Disclosure
pHNews Alpha 1 - genbackup.php Database Disclosure 0x01 Informations: Name : pHNews Alpha 1 Download : http://www.hotscripts.com/listings/jump/download/50111/ Vulnerability : Db Discloure Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is...
CVE-2008-3451
PhpWebGallery 1.7.0 and 1.7.1 are affected by CVE-2008-3451. Remote authenticated users with advisor privileges can obtain real e-mail addresses of other users by editing the target user’s profile. The NVD records a CVSS2 base score of 4.0 (Medium) with network attack vector and low complexity, h...
Dovecot IMAP 1.0.10 <= 1.1rc2 Remote Email Disclosure Exploit
Exploit for multiple platform in category remote exploits ============================================================= Dovecot IMAP 1.0.10 1.1rc3 Exploit Here's an exploit for the recent TAB vulnerability in Dovecot. It's nothing special since in the wild there are few to none targets because of...
[SA18361] Joomla! vCard Email Address Disclosure and TinyMCE Compressor Vulnerabilities
TITLE: Joomla! vCard Email Address Disclosure and TinyMCE Compressor Vulnerabilities SECUNIA ADVISORY ID: SA18361 VERIFY ADVISORY: http://secunia.com/advisories/18361/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information WHERE: From remote SOFTWARE: Joomla...
Hosting Controller 1.x/6.1 - Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may be used to carry out further attacks against a computer. An attacker can...
BasiliX Webmail 1.1 - Email Header HTML Injection
source: https://www.securityfocus.com/bid/10662/info BasiliX Webmail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An attacker can exploit this issue to gain acces...
Phorum Discussion Board Security Bug (Email Disclosure)
Concerning latest Phorum version 3.3.2 A bug in the PHP based forum script Phorum makes it possible to obtain the email addresses of the 10 most active users. In the 'admin/' directory of the forum there is a script called 'stats.php' that allows administrators and anyone else, since there is no...
Matt Wright FormMail 1.61.71.8 - Environmental Variables Disclosure
Matt Wright FormMail 1.61.71.8 - Environmental Variables Disclosure source: https://www.securityfocus.com/bid/1187/info An unauthorized remote user is capable of obtaining CGI environmental variable information from a web server running Matt Wright FormMail by requesting a specially formed URL th...