CVE-2004-2706

The vulnerability CVE-2004-2706 affects Gyach Enhanced (Gyach-E) before 1.0.4. An remote attacker can trigger a denial of service (crash) by sending conference packets containing error messages. Mitigation: upgrade Gyach-E to version 1.0.4 or later, per referenced entries. The connected documents...

Design/Logic Flaw

SimpNews 2.41.03 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php; or a direct request to 2 admin/dbginfos.php, 3 admin/heading.php, or 4 evsearch.php; which reveals the path in various error messages...

Design/Logic Flaw

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php or 2 a direct request to admin/trailer.php, which reveals the path in various error messages...

CVE-2007-5130

SimpGB 1.46.02 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php or 2 a direct request to admin/trailer.php, which reveals the path in various error messages...

Apache crossite scripting

Crossite scripting with UTF-7 characters on directories listing and error messages...

MDKA-2007:089 : proftpd

A bug in ProFTPD, when run on an IPv6-capable host, causes ProFTPD to generate an excessive number of error messages to syslog. As well, LDAP TLS support was incorrectly setup during compilation and as a result LDAP TLS support was disabled. The updated packages correct these issues. %NASLMINLEVE...

joekoe CMS 4.0 two vulnerabilities-vulnerability warning-the black bar safety net

Today is Ah bad sent me the software.. But just look at the software boring. in. So by looking for this vulnerability. in. Looked under beef cattle analysis of.. Read the inside meaning So by the way is also made up To put this belated vulnerability for everyone to see...

Design/Logic Flaw

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for 1 Stat.php 2 OutputFilter.php, 3 OutputCache.php, 4 Modifier.php, 5 Reader.php, and 6 TemplateCache.php in includes/patTemplate/patTemplate/; 7 includes/Cache/Lite/Output.php; and other unspecified...

CVE-2007-3384

Multiple cross-site scripting XSS vulnerabilities in examples/servlet/CookieExample in Apache Tomcat 3.3 through 3.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 Name or 2 Value field, related to error messages...

CVE-2007-4185

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for 1 Stat.php 2 OutputFilter.php, 3 OutputCache.php, 4 Modifier.php, 5 Reader.php, and 6 TemplateCache.php in includes/patTemplate/patTemplate/; 7 includes/Cache/Lite/Output.php; and other unspecified...

CVE-2007-3388

Multiple format string vulnerabilities in 1 qtextedit.cpp, 2 qdatatable.cpp, 3 qsqldatabase.cpp, 4 qsqlindex.cpp, 5 qsqlrecord.cpp, 6 qglobal.cpp, and 7 qsvgdevice.cpp in QTextEdit in Trolltech Qt 3 before 3.3.8 20070727 allow remote attackers to execute arbitrary code via format string specifier...

Cross site scripting

Cross-site scripting XSS vulnerability in SendMailServlet in the examples web application examples/jsp/mail/sendmail.jsp in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, relat...

CVE-2007-3383

Cross-site scripting XSS vulnerability in SendMailServlet in the examples web application examples/jsp/mail/sendmail.jsp in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the From field and possibly other fields, relat...

Design/Logic Flaw

index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the 1 name, 2 email, 3 phone, or 4 subject parameters, which reveals the installation path in the resulting error messages...

CVE-2007-3259

CVE-2007-3259 concerns Calendarix 0.7.20070307, where remote attackers can obtain sensitive information via multiple vectors: (1) invalid month[] on calendar.php, (2) invalid catview[] on cal_week.php during week operations, (3) invalid ycyear[] on yearcal.php, and (4) direct requests to cal_func...

Design/Logic Flaw

Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an invalid value of the 1 smarty or 2 selectedtheme parameter, which reveals the path in various error messages...

CVE-2007-3171

Affected software/impact: Uebimiau Webmail is vulnerable to information disclosure. The issue occurs in the demo/pop3/error.php script when an invalid value is supplied for the smarty or selected_theme parameter, which causes error messages to reveal the installation path. Root cause (as describe...

Design/Logic Flaw

PHP JackKnife PHPJK allows remote attackers to obtain sensitive information via 1 a request to index.php with an invalid value of the iParentUnq parameter, or a request to GDisplay.php with an invalid 2 iCategoryUnq or 3 sSort array parameter, which reveals the path in various error messages...

Code injection

Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent attackers to determine valid Active Directory account...

CVE-2007-3002

PHP JackKnife PHPJK allows remote attackers to obtain sensitive information via 1 a request to index.php with an invalid value of the iParentUnq parameter, or a request to GDisplay.php with an invalid 2 iCategoryUnq or 3 sSort array parameter, which reveals the path in various error messages...