1674 matches found
openSUSE Security Update : phpMyAdmin 4.4.15.4 (openSUSE-2016-168)
Security update to phpMyAdmin 4.4.15.4 The followinng vulnerabilities were fixed: boo964024 - CVE-2016-2038: Multiple full path disclosure vulnerabilities - CVE-2016-2039: Unsafe generation of XSRF/CSRF token - CVE-2016-2040: Multiple XSS vulnerabilities - CVE-2016-1927: Insecure password...
Paragon Initiative Enterprises: Full Path Disclosure
Hi as reported in email, there is a full path disclosure in EasyDB you fixed some of them in last commit add this code before and "execute$params" function call! ifcount$params != count$params,COUNTRECURSIVE throw new \InvalidArgumentException"Invalid params"; this will check $params to be 1d...
openSUSE Security Update : phpMyAdmin (openSUSE-2016-151)
This update to phpMyAdmin 4.4.15.4 fixes the following issues boo964024 - CVE-2016-2038: Multiple full path disclosure vulnerabilities - CVE-2016-2039: Unsafe generation of XSRF/CSRF token - CVE-2016-2040: Multiple XSS vulnerabilities - CVE-2016-1927: Insecure password generation in JavaScript -...
FreeBSD : phpmyadmin -- Multiple full path disclosure vulnerabilities (5d6a204f-c60b-11e5-bf36-6805ca0b3d42)
The phpMyAdmin development team reports : By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. We consider these vulnerabilities to...
FreeBSD : phpmyadmin -- Full path disclosure vulnerability in SQL parser (78b4ebfb-c60b-11e5-bf36-6805ca0b3d42)
The phpMyAdmin development team reports : By calling a particular script that is part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. We consider this vulnerability...
FreeBSD : phpmyadmin -- Multiple full path disclosure vulnerabilities (740badcb-c60b-11e5-bf36-6805ca0b3d42)
The phpMyAdmin development team reports : By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. We consider these vulnerabilities to...
phpmyadmin -- Full path disclosure vulnerability in SQL parser
The phpMyAdmin development team reports: By calling a particular script that is part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. We consider this vulnerability ...
phpmyadmin -- Multiple full path disclosure vulnerabilities
The phpMyAdmin development team reports: By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path of the directory where phpMyAdmin is installed. We consider these vulnerabilities to ...
Full path disclosure vulnerability in SQL parser.
PMASA-2016-8 Announcement-ID: PMASA-2016-8 Date: 2016-01-24 Summary Full path disclosure vulnerability in SQL parser. Description By calling a particular script that is part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the...
Multiple full path disclosure vulnerabilities.
PMASA-2016-1 Announcement-ID: PMASA-2016-1 Date: 2016-01-23 Summary Multiple full path disclosure vulnerabilities. Description By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains the full path...
General Motors: Full Path Disclosure on gmchat.gm.com
Users were able to download website application files as well as identify application path information. Permissions have since been fixed to no longer allow application information disclosure...
Mail.ru: [allods.my.com] Full Path Disclosure
Возникает из-за передачи переменной username как массива. allods.my.com/forum/wcf/acp/index.php?form=Login POST packageID=1&password=1&s=1&url=&username=1 error message: PHP warning in file /opt/WWWRoot/allods.com/wwwroot/forum/wcf/lib/util/StringUtil.class.php 118: trim expects parameter 1 to be...
WordPress Meta Slider Plugin <= 2.1.6 - Full Path Disclosure
This plugin is prone to a full path disclosure vulnerability. Solution Update the plugin...
Subrion 3.x - Multiple Vulnerabilities
Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X Tested Version = Latest, 3.3.5 on a Wamp Server. x Google...
Subrion 3.x.x File Download / Arbitrary Access
Title = Subrion 3.X.X - Multiple Exploits - Author = bRpsd skype: vegnox - Date Release = 23 October, 2015 - Vendor = Subrion Homepage = http://www.subrion.org/ Download = http://tools.subrion.org/get/latest.zip Vulnerable Versions = 3.X.X Tested Version = Latest, 3.3.5 on a Wamp Server. x Google...
WordPress WP Photo Album Plus Plugin <= 4.9.0 - Full Path Disclosure
This plugin is prone to a full path disclosure vulnerability. Solution Update the plugin...
WordPress Multilingual CMS Plugin <= 3.1.7.1 - Full Path Disclosure
This plugin is prone to a full path disclosure vulnerability. Solution Update plugin...
WordPress Super Refer A Friend Plugin - Full Path Disclosure
This plugin is prone to a full path disclosure vulnerability. Solution Update the plugin...
JM Twitter Cards <= 6.1 - Full Path Disclosure (FPD)
The JM Twitter Cards WordPress plugin was affected by a Full Path Disclosure FPD security vulnerability...
WordPress JM Twitter Cards Plugin <= 6.1 - Full Path Disclosure
Because of this vulnerability, attackers can discover the full path to the WordPress installation on the server, which they could use to assist in other attacks. Solution Update this plugin...