cotonti CMS 0.9.4 - Multiple Vulnerabilities

Cotonti CMS v0.9.4 Multiple Remote Vulnerabilities Vendor: Cotonti Team Product web page: http://www.cotonti.com Affected version: 0.9.4 Siena Summary: Cotonti is a powerful open-source web development framework and content manager with a focus on security, speed and flexibility. Desc: Input pass...

Cotonti CMS v0.9.4 Multiple Remote Vulnerabilities

Summary Cotonti is a powerful open-source web development framework and content manager with a focus on security, speed and flexibility. Description Input passed via the parameters 'redirect.php' in 'message.php' and 'w' and 'id' in 'index.php' script are not properly sanitised before being...

Cotonti CMS v0.9.4 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications Cotonti CMS v0.9.4 Multiple Remote Vulnerabilities Vendor: Cotonti Team Product web page: http://www.cotonti.com Affected version: 0.9.4 Siena Summary: Cotonti is a powerful open-source web development framework and content manager with a focu...

Installation Path Disclosure Weakness in SPIP

High-Tech Bridge SA Security Research Lab has discovered a weakness in SPIP which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in SPIP The weakness exists due to application reveals the full path to installation directory in an...

Concrete5 <= 5.4.2.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Concrete5 = 5.4.2.1 SQL Injection and XSS Vulnerabilities Date: 2011-10-04 Author: Ryan Dewhurst ryandewhurst at gmail @ethicalhack3r www.ethicalhack3r.co.uk Software Link:...

XSS и FPD уязвимости в Adobe ColdFusion

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых уязвимостях в Adobe ColdFusion. Это Cross-Site Scripting и Full path disclosure уязвимости. XSS WASC-08: http://site/CFIDE/componentutils/componentdetail.cfm?component=3Cbody20onload=alertdocument.cookie3E...

Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities

The host is running Adobe ColdFusion and is prone to multiple full path disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobecoldfusionmultiplefpdvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities Authors: Sooraj KS...

dotProject '.php' Files Installation Path Disclosure Vulnerability

The host is running dotProject and is prone to path disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpoddotprojectphpfileinstallpathdiscvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ dotProject '.php' Files Installation Path Disclosure Vulnerability Authors: Madhuri D Copyright: Copyrig...

dotProject <= 2.1.4 Information Disclosure Vulnerability - Active Check

dotProject is prone to a path disclosure vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities (Sep 2011)

Adobe ColdFusion is prone to multiple full path disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe ColdFusion 7 Cross Site Scripting

Hello list! I want to warn you about new security vulnerabilities in Adobe ColdFusion. These are Cross-Site Scripting and Full path disclosure vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are Adobe ColdFusion 7 and previous versions to XSS, an...

CVE-2011-3795

Podcast Generator 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/themes.php and certain other files...

CVE-2011-3762

OpenBlog 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files...

Information disclosure

PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/createacct.php and certain other files...

Information disclosure

TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/system/offline.php and certain other files...

CVE-2011-3787

phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/schedule.template.php and certain other files...

CVE-2011-3791

CVE-2011-3791 affects Piwik 1.1 and enables information disclosure through direct requests to PHP files (e.g., plugins/Widgetize/Widgetize.php), revealing installation paths in error messages. Root cause: error output leaks path information. Impact: partial confidentiality loss via remote access;...

CVE-2011-3775

PHPfileNavigator 2.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xestion/varios/logs.inc.php and certain other files...

CVE-2011-3760

CVE-2011-3760 affects Nucleus CMS 3.61, where remote attackers can trigger a direct request to a PHP file (e.g., xmlrpc/api_nucleus.inc.php) to disclose the installation path via an error message. The NVD and related records confirm this information disclosure vector and name the affected file pa...

CVE-2011-3777

phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/zilveer/style.css.php and certain other files...