IBM WebSphere MQ File Transfer Edition Web Gateway Insufficient Access Control

No description provided by source. Exploit Author: Nir Valtman Affected Platforms: Version 7.0.4 and all previous versions of WebSphereMQ File Transfer Editionhttp://publib.boulder.ibm.com/infocenter/wmqfte/v7r0/index.jsprunning on all platforms are affected. Apparently they published the CVE abo...

Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities

Trustwave's SpiderLabs Security Advisory TWSL2014-001: Multiple Vulnerabilities in Franklin Fueling's TS-550 evo Published: 01/03/2014 Version: 1.0 Vendor: Franklin Fueling Systems http://www.franklinfueling.com/ Product: TS-550 evo device Version affected: Firmware 2.0.0.6833 confirmed. Affects...

Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities

Franklin Fueling TS-550 evo 2.0.0.6833 - Multiple Vulnerabilities Trustwave's SpiderLabs Security Advisory TWSL2014-001: Multiple Vulnerabilities in Franklin Fueling's TS-550 evo Published: 01/03/2014 Version: 1.0 Vendor: Franklin Fueling Systems http://www.franklinfueling.com/ Product: TS-550 ev...

Improper access control

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request...

CVE-2012-4747

Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to read 1 template aka .tmpl files, 2 other custom...

CVE-2012-4069

Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request for system/db/website.db...

Improper access control

Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database via a direct request for system/db/website.db...

CVE-2012-2905

Artiphp CMS 5.5.0 Neo r422 stores database backups with predictable names under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

PT-2011-1253 · Ibm · Ibm Rational Asset Manager

Name of the Vulnerable Software and Affected Versions: IBM Rational Asset Manager versions 7.5 Description: The issue is related to insufficient access control in the processing of the UID parameter, allowing a remote attacker to bypass security restrictions. This could enable an attacker to modi...

CVE-2011-1665

PHPBoost 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain backup SQL files via a direct request for predictable filenames in cache/backup/...

CVE-2009-4765

CNR Hikaye Portal 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/hikaye.mdb...

CVE-2009-4760

Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/guestbook.mdb...

CVE-2010-1116

LookMer Music Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for dbmdb/LookMerSarkiMDB.mdb...

CVE-2010-1067

E-membres 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/bdEMembres.mdb...

CVE-2010-0978

KMSoft Guestbook aka GBook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb...

CVE-2010-0984

Acidcat CMS 3.5.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for databases/acidcat3.mdb...

CVE-2010-0978

KMSoft Guestbook aka GBook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb...

CVE-2010-0123

The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a "semi-predictable file name."...

CVE-2010-0939

The CVE-2010-0939 issue affects Visialis ABB Forum 1.1. It is caused by insufficient access control that allows remote attackers to access and download the database file fpdb/abb.mdb via a direct web request, exposing sensitive information stored under the web root. The available sources confirm ...

CVE-2010-0665

CVE-2010-0665 relates to JAG (Just Another Guestbook) 1.14. The issue is an information disclosure due to insufficient access control: an attacker can directly request jag/database.sql from the web root to obtain sensitive data. The NVD entry cites a base score of 5.0 (Medium) with network attack...