codebug7.txt

CODEBUG Labs Advisory 7 Title: Multiple vulnerabilities in MercuryBoard 1.1.1 Author: Alberto Trivero English Version: Alberto Trivero Product: MercuryBoard 1.1.1 Type: Multiple Vulnerabilities Web: http://www.codebug.org/ -- Software Page www.mercuryboard.com "MercuryBoard is a powerful message...

waraxe-2005-SA039.txt

================================================================================ waraxe-2005-SA039 ================================================================================ Critical Sql Injection in Sgallery module for PhpNuke...

SugarSales Multiple Vulnerabilities

------------------------------------------------------------------------- | SugarSales Multiple Vulnerabilities | ------------------------------------------------------------------------- Date: 12-11-2004 Author: Daniel Fabian Product: SugarSales formerly SugarCRM Affected Version: up to 2.0.1c...

F-Secure Policy Manager 5.11 - 'FSMSH.dll' CGI Application Installation Full Path Disclosure

source: https://www.securityfocus.com/bid/11869/info F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the vulnerable software will return an error message that includes the installation path of the...

waraxe-2004-SA038.txt

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...

[waraxe-2004-SA#038 - Multiple vulnerabilities in Event Calendar module for PhpNuke]

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...

Vulnerabilities in JAF CMS

ECHOADV08$2004 --------------------------------------------------------------------------- Vulnerabilities in JAF CMS --------------------------------------------------------------------------- Author: y3dips Date: November, 4th 2004 Location: Indonesia, Jakarta Web:...

Echo Security Advisory 2004.8

ECHOADV08$2004 --------------------------------------------------------------------------- Vulnerabilities in JAF CMS --------------------------------------------------------------------------- Author: y3dips Date: November, 4th 2004 Location: Indonesia, Jakarta Web:...

blackboard.txt

Multiple vulnerabilities in BlackBoard AuThor:Cracklove emA!l:CrackloveatGmaildotCom HoMePaGe:http://ProxySky.com Info Website: http://blackboard.unclassified.de Version: 1.5.1,Maybe prior Problem: Full path disclosure,Include file Vuls 1.Full path disclosure: Let's try to request like this:...

Multiple vulnerabilities in ZanfiCmsLite

AuThor:Cracklove emA!l:CrackloveatGmaildotCom HoMePaGe:http://ProxySky.com Info Website: http://www.zanfi.nl Version: 1.1,The Newest Version Problem: Full path disclosure,Include file Vuls 1.Full path disclosure: Let's try to request like this: http://localhost/cms/admpages.php and we get standar...

phplinks2.txt

In-Reply-To: Hi, This is also a php inclusion bug. You can include any .php script on remote system with "PHP Links". Request like this will include script "execute.php" in "/some/some" directory: www.site.com/phplinks/index.php?show=../../../../../../some/some/execute So, if you have FTP access ...

Full path disclosure and sql injection on CubeCart 2.0.1

-------------------------------------------------------- Full path disclosure and sql injection on CubeCart 2.0.1 -------------------------------------------------------- 1Introduction 2The Problem 3The Solution 4Timeline 5Feddback 1Introduction "CubeCart is an eCommerce script written with PHP &...

Echo Security Advisory 2004.7

ECHOADV07$2004 --------------------------------------------------------------------------- Multiple Vulnerabilities in AJ-Fork --------------------------------------------------------------------------- Author: y3dips Date: September, 23th 2004 Location: Indonesia, Jakarta Web:...

Multiple vulnerabilities in BlackBoard

Multiple vulnerabilities in BlackBoard AuThor:Cracklove emA!l:CrackloveatGmaildotCom HoMePaGe:http://ProxySky.com Info Website: http://blackboard.unclassified.de Version: 1.5.1,Maybe prior Problem: Full path disclosure,Include file Vuls 1.Full path disclosure: Let's try to request like this:...

Full path disclosure in PHP Links

Nkxtox Advisory 0000-00003 Full path disclosure in PHP Links Date: 03/10/04 Bug: http://server/phplinks/index.php?show=juax0rx Warning: maininclude/juax0rx.php: failed to open stream: No such file or directory in /home/h4x0rsit3/b0x/phplinks/index.php on line 198 Warning: main: Failed opening...

FUll Path Disclosure in YABBSE

ECHOADV05$2004 --------------------------------------------------------------------------- FUll Path Disclosure in YABBSE --------------------------------------------------------------------------- Author: y3dips Date: August, 25th 2004 Location: Indonesia, Jakarta Web:...

Multiple vulnerabilities in PHP-FUSION

ECHOADV04$2004 --------------------------------------------------------------------------- Multiple vulnerabilities in PHP-FUSION --------------------------------------------------------------------------- Author: y3dips Date: August, 17th 2004 Location: Indonesia, Jakarta Web:...

Vulnerabilities in Merak Webmail Server.

CRIOLABS http://www.criolabs.net - Software: Merak Webmail Server - Type: Webmail - Company: Merak Mail Server, Inc. Software Software: Merak Webmail Server Version: 5.2.7 Plataforms: All Windows platforms Web: http://www.merakmailserver.com/ Vendor Description Merak's WebMail Server is used by...

SQL Injection in CACTI

///////////////////////////////////////////////////// //// Vulnerable Program: CACTI //// //// Version : The latest version 0.8.5a //// //// Url: http://www.raxnet.net //// //// The Bug: SQL injection to allows bypass the auth. //// //// Date: Today, August 16 off 2004 //// //// Author: Fernando...

Multiple vulnerabilities in eNdonesia CMS

ECHOADV02$2004 --------------------------------------------------------------------------- Multiple vulnerabilities in eNdonesia CMS --------------------------------------------------------------------------- Author: y3dips Date: August, 2th 2004 Location: Indonesia, Jakarta Web:...