CVE-2002-2094

Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct...

Coldfusion Fusebox V4.1.0 Vulnerability

This was discovered by myself over the weekend. I cant find out what versions of fusebox this vulnerability is in but seeing as it affects the main fusebox page I can only assume it is the latest v4.1.0 and possibly some older versions. According to the Fusebox site, What is Fusebox? Fusebox is a...

bmforumXSS.txt

Multiple Cross site scripting in BMForum vendor url:http://www.bmforum.com/ Advisore:http://lostmon.blogspot.com/2005/07/ multiple-cross-site-scripting-in.html Vendor notify:yes Exploit available:yes BMForum contains a flaw that allows a remote cross site scripting attack.This flaw exists because...

articleLive2005.txt

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah SPECIAL OFFER Hire my auditing services, if I dont fin...

GLSA-200507-02 : WordPress: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200507-02 WordPress: Multiple vulnerabilities James Bercegay of the GulfTech Security Research Team discovered that WordPress insufficiently checks data passed to the XML-RPC server. He also discovered that WordPress has several...

[ECHO_ADV_20$2005] Full path disclosure JAF CMS

--------------------------------------------------------------------------- ECHOADV20$2005 Full path disclosure JAF CMS --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 23th 2005 Location: Indonesia, Jakarta Web:...

M4DR007-06SA (security advisory): Multiple vulnerabilities in UPB 1.9.6 GOLD

M4DR007-06SA security advisory: Multiple vulnerabilities in UPB 1.9.6 GOLD Published: 06 16 2005 Released: 06 16 2005 Name: Ultimate PHP Board UPB Affected Systems: = 1.9.6 GOLD Issue: Full Path Disclosure, Cross-Site Scripting, Sensitive Information Disclosure Author: Alberto Trivero Vendor:...

FlatNuke 2.5.x - index.php?where Full Path Disclosure

FlatNuke 2.5.x - index.php?where Full Path Disclosure source: https://www.securityfocus.com/bid/13882/info Multiple input validation vulnerabilities reportedly affect FlatNuke. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in...

FlatNuke 2.5.x - 'index.php?where' Full Path Disclosure

source: https://www.securityfocus.com/bid/13882/info Multiple input validation vulnerabilities reportedly affect FlatNuke. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in application-critical actions such as generating Web content...

phpBBkbmod.txt

phpBB - Knowledge Base MOD SQL-Injection vulnerability and Full Path Disclosure Discovered by R and deluxe89 Discussion: The phpbb - Knowledge Base MOD has a relatively hard to exploit SQL-Injection vulnerability. However, an attacker can exploit this bug and receive informations from the databas...

[SECURITYREASON.COM] PostNuke XSS and Full path disclosure 0.760RC3=>x

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke XSS and Full path disclosure 0.760RC3=x cXIb8O3.7 Author: Maksymilian Arciemowicz cXIb8O3 Date: 15.3.2005 from SECURITYREASON.COM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 and 0.760RC3 PostNuke is an open source, open...

[SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05)

SePro Bugtraq WBB Portal - JGS-Portal = 3.0.2 - Multiple Vulnerabilities 09.05.05 Vendor: JGS-XA URL: http://www.jgs-xa.de/ Version: = 3.0.2 Type: SQL-Injections, XSS and Full Path Disclosures Discovered by deluxe89 and the Security-Project Team Description: ------------------------- The JGS-Port...

CVE-2005-1570

forum.asp in bttlxeForum 2.0 allows remote attackers to obtain full path information via a certain hex-encoded argument to the page parameter, possibly due to a SQL injection vulnerability...

Directtopics Multiple Vulnerabilities (Security Advisory)

------------------------------------------------------------------------ Directtopics Multiple Vulnerabilities Security Advisory By : Morinex e-mail : [email protected] date : 08-04-2k5 shoutz : w00pie.nl Target : Directtopics Vulnerable Versions: DT 2 beta , DT2 final, 2.1, and 2.2 URL :...

CVE-2005-1489

Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to 1 calendaraddevent.html, 2 calendarevent.html, or 3 calendartask.html...

CVE-2004-1990

Aldo's Web Server aweb 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request...

CVE-2004-1998

The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid show parameter to modules.php, which reveals the full path in a PHP error message...

PwsPHP v1.2.2 Final - Multiples vulnerabilities

PwsPHP v1.2.2 Final - Multiples vulnerabilities ----------------------------------------------- VULNERABLE PRODUCT ------------------ Forum: Pwsphp Version: 1.2.2 Final Vulnerabilities: Multiples -------------------------- / / / / / / / / / / / / // / /// // / // / / / / // / / .///// / .// // ./...

Multiple vulnerabilities in myBloggie 2.1.1

CODEBUG Labs Advisory 9 Title: Multiple vulnerabilities in myBloggie 2.1.1 Authors: Alberto Trivero & CorryL English Version: Alberto Trivero Product: myBloggie 2.1.1 Type: Multiple Vulnerabilities Web: http://www.codebug.org/ -- Software Page mybloggie.mywebland.com "myBloggie is considered one ...

[hackgen-2005-#004] - Multiple bugs in MidiCart PHP Shopping Cart

http://www.hackgen.org/advisories/hackgen-2005-004.txt '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' hackgen-2005-004 ' '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' Multiple bugs in MidiCart PHP Shopping Cart '...