RadScripts RadBids Gold 2.0 - index.php Multiple Cross-Site Scripting Vulnerabilities

RadScripts RadBids Gold 2.0 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The...

RadScripts RadBids Gold 2.0 - 'faq.php?farea' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A remote attacker can disclose arbitrar...

RadScripts RadBids Gold 2.0 - 'index.php?mode' SQL Injection

source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A remote attacker can disclose arbitrar...

RadScripts RadBids Gold 2.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13080/info RadBids Gold is reported prone to multiple vulnerabilities. These issues include arbitrary file disclosure, cross-site scripting, and SQL injection. The following specific vulnerabilities were identified: A remote attacker can disclose arbitrar...

ColdFusion < 7.0 MX File Disclosure

Binary data 2806.prm...

Macromedia Security Bulletin - ColdFusion MX 6.1

MPSB05-02 - Workaround available for ColdFusion MX 6.1 Updater file disclosure. Originally posted: April 7, 2005 http://www.macromedia.com/go/mpsb05-02 Summary: ColdFusion 6.1 Updater 1 in the ColdFusion MX for JRun4 configuration only creates a /WEB-INF/cfclasses directory under the web server...

Logics Software LOG-FT - Arbitrary File Disclosure

Logics Software LOG-FT - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is...

Logics Software LOG-FT - Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an attacker can simply issue a specially...

Ciamos 0.9.2 - Highlight.php File Disclosure

Ciamos 0.9.2 - Highlight.php File Disclosure source: https://www.securityfocus.com/bid/12854/info Ciamos is reported prone to a file disclosure vulnerability. The full scope of this vulnerability is not currently known, however, it is demonstrated that this issue may be leveraged to disclose the...

Ciamos 0.9.2 - 'Highlight.php' File Disclosure

source: https://www.securityfocus.com/bid/12854/info Ciamos is reported prone to a file disclosure vulnerability. The full scope of this vulnerability is not currently known, however, it is demonstrated that this issue may be leveraged to disclose the source of PHP files contained in a Ciamos...

[Full-disclosure] Multiple Vulnerabilities of PY Software Active Webcam WebServer

Multiple Vulnerabilities of PY Software Active Webcam WebServer By Sowhat 04.Jan.2005 http://secway.org/advisory/ad20050104.txt Product: PY Software Active Webcam 5.5 Vendor: PY Software, Inc. 1 Introduction Active WebCam is a popular shareware program for capturing video streams from video devic...

Computalynx CProxy 3.33.4.x - Directory Traversal

Computalynx CProxy 3.33.4.x - Directory Traversal source: https://www.securityfocus.com/bid/12722/info CProxy is reported prone to a remote directory traversal vulnerability. This issue arises due to insufficient sanitization of user-supplied data. A remote user may exploit this issue to disclose...

Computalynx CProxy 3.3/3.4.x - Directory Traversal

source: https://www.securityfocus.com/bid/12722/info CProxy is reported prone to a remote directory traversal vulnerability. This issue arises due to insufficient sanitization of user-supplied data. A remote user may exploit this issue to disclose arbitrary files and carry out a denial of service...

CVE-2004-1030

fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message...

phpBB: Multiple vulnerabilities

Background phpBB is an Open Source bulletin board package. Description It was discovered that phpBB contains a flaw in the session handling code and a path disclosure bug. AnthraX101 discovered that phpBB allows local users to read arbitrary files, if the "Enable remote avatars" and "Enable avata...

CVE-2005-0588: Undefined Security Weakness

Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system...

CVE-2004-1743: Undefined Security Weakness

Easy File Sharing EFS Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the diskc virtual folder...

phpBB vulnerable to file disclosure

Overview The phpBB input validation methods may fail to sanitize user input resulting in a disclosure of arbitrary file data. Description phpBB is a customizable open source bulletin board package. It contains functionality that allows users to specify graphic files for use as "avatars." These...

iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB Arbitrary File Disclosure Vulnerability

phpBB Group phpBB Arbitrary File Disclosure Vulnerability iDEFENSE Security Advisory 02.22.05 www.idefense.com/application/poi/display?id=204&type=vulnerabilities February 22, 2005 I. BACKGROUND phpBB is an open source bulletin board package written in the PHP web scripting language. More...

phpBB <= 2.0.11 Multiple Vulnerabilities

The remote host is running phpBB version 2.0.11 or older. Such versions suffer from multiple vulnerabilities: - full path display on critical messages. - full path disclosure in username handling caused by a PHP 4.3.10 bug. - arbitrary file disclosure vulnerability in avatar handling functions. -...