PT-2006-5814 · Openconcept · Openconcept Back-End Cms

Name of the Vulnerable Software and Affected Versions: OpenConcept Back-End version 0.4.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the includes path parameter in several PHP files, including "admin/index.php", "Facts.php", and "search.php"...

PT-2006-5529 · Phprog · Phprog

Name of the Vulnerable Software and Affected Versions: PHProg versions prior to 1.1 Description: The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the album parameter in index.php, which is us...

Design/Logic Flaw

Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads. NOTE: post-disclosure analysis by CVE suggests that the "page" paramet...

Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (3)

/ \ Windows HTML Help Workshop Index File Stack Overflow Exploit / by Darkeagle \ / http://eagle.blacksecurity.org \ / MS coders codes so secure code. Keep coding : \ / Original Advisory: http://eagle.blacksecurity.org/stuff/unl0ck/adv/55k700206.txt \ / Exploit tested in WinXP SP2 RUS. \ / includ...

CVE-2006-0477

Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link...

PT-2006-1442 · Rcblog · Rcblog

Name of the Vulnerable Software and Affected Versions: RCBlog version 1.03 Description: A directory traversal issue exists, allowing remote attackers to read arbitrary .txt files by using a .. dot dot in the post parameter of the index.php file. This could potentially include accessing a file tha...

PT-2005-3816 · Noah · Noah'S Classifieds

Name of the Vulnerable Software and Affected Versions: Noah's classifieds affected versions not specified Description: A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the rollid parameter in the index.php file...

b2evolution index.php SQL Injection

Binary data 2487.prm...

CVE-2001-1351: Undefined Security Weakness

Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers...

Apache 1.3.61.3.91.3.111.3.121.3.20 - Root Directory Access

Apache 1.3.61.3.91.3.111.3.121.3.20 - Root Directory Access source: https://www.securityfocus.com/bid/1284/info Apache HTTP Server 1.3.x win32 allows people to get a directory listing of a directory, if it is enabled in the config, even if an index file is present that would normally be displayed...

Apache 1.3.6/1.3.9/1.3.11/1.3.12/1.3.20 - Root Directory Access

source: https://www.securityfocus.com/bid/1284/info Apache HTTP Server 1.3.x win32 allows people to get a directory listing of a directory, if it is enabled in the config, even if an index file is present that would normally be displayed instead. This can be achieved by sending a number of "/"...

website.pro.txt

Date: Tue, 16 Feb 1999 17:45:09 -0600 From: Christian Antkow To: [email protected] Subject: Website Pro v2.0 NT Configuration Issues As some of you might be aware, our website www.idsoftware.com was hacked this morning using the "out-of-the-box" features of Website Pro 2.0. The perpetrator use...

Netscape FastTrack Server 3.0.1 - Fasttrack Root Directory Listing

Netscape FastTrack Server 3.0.1 - Fasttrack Root Directory Listing source: https://www.securityfocus.com/bid/481/info Netscape's Fasttrack server is supposed to display a directory listing if the follwing three conditions are met: 1: Directory listing is enabled 2: No filename is specified in the...

Netscape FastTrack Server 3.0.1 - Fasttrack Root Directory Listing

source: https://www.securityfocus.com/bid/481/info Netscape's Fasttrack server is supposed to display a directory listing if the follwing three conditions are met: 1: Directory listing is enabled 2: No filename is specified in the requested URL 3: There is no index file in that directory defaults...

PT-1999-1196 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows auto-indexing of a WWW directory, providing a list of all files in that directory if it does not contain an index.html file. This could potentially expose sensitive...