CVE-2009-0328

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

CVE-2009-0328

CVE-2009-0328 affects ROBS-PROJECTS Digital Sales IPN (also DS-IPN.NET/DS-IPN Paypal Shop). The issue is insufficient access control that allows remote attackers to directly download the database file (Database/Sales.mdb) from the web root, exposing user credentials. This has been captured in mul...

CVE-2009-0328

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

CVE-2009-0328: Undefined Security Weakness

ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...

DS-IPN.NET Digital Sales IPN Database Disclosure Vulnerability

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

CVE-2008-5568

Cross-site request forgery CSRF vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the adminid, newpass1, and newpass2 parameters...

CVE-2008-5568

The CVE-2008-5568 entry describes a CSRF vulnerability in IPN Pro 3 (version 1.44 and earlier) affecting admin/settings.php. An attacker could change the admin password by exploiting a logout action using the admin_id, newpass_1, and newpass_2 parameters. The public technical details in the conne...

CVE-2008-5568

Cross-site request forgery CSRF vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the adminid, newpass1, and newpass2 parameters...

CVE-2008-5568: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin/settings.php in IPN Pro 3 1.44 and earlier allows remote attackers to change the admin password via a logout action in conjunction with the adminid, newpass1, and newpass2 parameters...

IPNPro3 1.44 - Admin Password Changing

IPNPro3 1.44 - Admin Password Changing === LIVE === » removed... === Greetz === » ALLAH » Tornado2800 » B13...

CVE-2006-0202: Undefined Security Weakness

Dave Nielsen and Patrick Breitenbach PayPal Web Services aka PHP Toolkit 0.50 and possibly earlier has 1 world-readable permissions for ipn/logs/ipnsuccess.txt, which allows local users to view sensitive information payment data, and 2 world-writable permissions for ipn/logs, which allows local...