chacmool Private Message System 1.1.3 - send.php Arbitrary Message Access

chacmool Private Message System 1.1.3 - send.php Arbitrary Message Access source: https://www.securityfocus.com/bid/11671/info Private Message System is reported prone to multiple vulnerabilities that can allow remote attackers to carry out cross-site scripting attacks and disclose arbitrary...

chacmool Private Message System 1.1.3 - send.php?tid Cross-Site Scripting

chacmool Private Message System 1.1.3 - send.php?tid Cross-Site Scripting source: https://www.securityfocus.com/bid/11671/info Private Message System is reported prone to multiple vulnerabilities that can allow remote attackers to carry out cross-site scripting attacks and disclose arbitrary...

CVE-2004-0729

PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid 1 categoryrows parameter to index.php, 2 faq parameter to faq.php, or 3 ranksrow parameter to profile.php, which reveal the full path in an error message...

Symantec Brightmail Anti-Spam 6.0 - Unauthorized Message Disclosure

Symantec Brightmail Anti-Spam 6.0 - Unauthorized Message Disclosure source: https://www.securityfocus.com/bid/10657/info Symantec Brightmail anti-spam is reported prone to an unauthorized message disclosure vulnerability. This issue exists in the Brightmail anti-spam control center. Due to improp...

Symantec Brightmail Anti-Spam 6.0 - Unauthorized Message Disclosure

source: https://www.securityfocus.com/bid/10657/info Symantec Brightmail anti-spam is reported prone to an unauthorized message disclosure vulnerability. This issue exists in the Brightmail anti-spam control center. Due to improper access validation a remote attacker can read users' filtered emai...

CVE-2004-1963

nqt.php in Network Query Tool NQT 1.6 allows remote attackers to obtain sensitive information via a string in the portNum parameter, which reveals the full path in an error message...

quikstore.txt

Indonesia Security Development Team Advisory QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users ===================================================================== Advisory Name: QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users Release Date:...

Mailtraq 2.2 - Webmail Utility Full Path Disclosure

Mailtraq 2.2 - Webmail Utility Full Path Disclosure source: https://www.securityfocus.com/bid/7815/info A vulnerability has been reported for Mailtraq that may result in the disclosure of path information. The vulnerability exists due to insufficient sanitization of HTTP requests. Specifically, a...

eject 2.0.10 vulnerability

Application: eject Version: 2.0.10 Platforms: Linux Distribution: SuSE 7.3, most likely other versions of SuSE Linux as well also all distributions that make eject SUID root Bugs: verbose error messages reveal location of files/directories Risk: low Author: nordi e-mail: [email protected] 1...

Opera 7.0 - Error Message History Disclosure

Opera 7.0 - Error Message History Disclosure source: https://www.securityfocus.com/bid/6759/info It has been reported that Opera fails to ensure that a remote site has proper authorization before executing some methods used to access error messages stored in the Opera console. This issue is furth...

EmuMail 5.0 - Web Root Full Path Disclosure

EmuMail 5.0 - Web Root Full Path Disclosure source: https://www.securityfocus.com/bid/5823/info Emumail is an open source web mail application. It is available for the Unix, Linux, and Microsoft Windows operating systems. Under some conditions, Emumail may reveal sensitive configuration...