4338 matches found
Cool Video Gallery 1.3 WordPress Plugin Path Disclosure
Vulnerability ID: HTB22872 Reference: http://www.htbridge.ch/advisory/pathdisclosureincoolvideogallerywordpressplugin.html Product: Cool Video Gallery wordpress plugin Vendor: Praveen Rajan http://wordpress.org/extend/plugins/cool-video-gallery/ Vulnerable Version: 1.3 Vendor Notification: 22...
F-Secure Policy Manager 'WebReporting' Module XSS And Path Disclosure Vulnerabilities
This host is running F-Secure Policy Manager and is prone to cross site scripting and path disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: gbfsecurepolicymanagerxssnpathdiscvuln.nasl 7276 2017-09-26 11:59:52Z cfischer $ F-Secure Policy Manager 'WebReporting' Module XSS And Path...
F-Secure Policy Manager 'WebReporting' Module XSS And Path Disclosure Vulnerabilities
F-Secure Policy Manager is prone to cross-site scripting XSS and path disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
PHPIDS 0.6.5 Path Disclosure / Information Leakage
Hello list! I want to warn you about Full path disclosure and Information Leakage vulnerabilities in PHPIDS. ------------------------- Affected products: ------------------------- Vulnerable are PHPIDS 0.6.5 and previous versions. ---------- Details: ---------- Full path disclosure WASC-13:...
PrestaShop 1.3.6 Path Disclosure
Vulnerability ID: HTB22837 Reference: http://www.htbridge.ch/advisory/pathdisclosureinprestashop.html Product: PrestaShop Vendor: PrestaShop http://www.prestashop.com/ Vulnerable Version: Prestashop 1.3.6 final Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure Risk level:...
Fedora 15 : phpMyAdmin-3.3.9.2-1.fc15 (2011-1282)
Changes for 3.3.9.1 2011-02-08 - security Path disclosure, see PMASA-2011-1 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-1.php Changes for 3.3.9.2 2011-02-11 - security SQL injection, see PMASA-2011-2 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-2.php Note that Tenable...
HTB22837: Path disclosure in PrestaShop
Vulnerability ID: HTB22837 Reference: http://www.htbridge.ch/advisory/pathdisclosureinprestashop.html Product: PrestaShop Vendor: PrestaShop http://www.prestashop.com/ Vulnerable Version: Prestashop 1.3.6 final Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure Risk level:...
Tribiq CMS 5.2.7b Path Disclosure
Vulnerability ID: HTB22857 Reference: http://www.htbridge.ch/advisory/fullpathdisclosureintribiqcms.html Product: Tribiq CMS Vendor: Tribal Limited http://tribiq.com/ Vulnerable Version: 5.2.7b and probably prior versions Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure...
HTB22857: Path disclosure in Tribiq CMS
Vulnerability ID: HTB22857 Reference: http://www.htbridge.ch/advisory/fullpathdisclosureintribiqcms.html Product: Tribiq CMS Vendor: Tribal Limited http://tribiq.com/ Vulnerable Version: 5.2.7b and probably prior versions Vendor Notification: 17 February 2011 Vulnerability Type: Path disclosure...
Уязвимости в PHPIDS
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Information Leakage уязвимостях в PHPIDS. Full path disclosure WASC-13: http://site/script.php?p=’ При отправке "атакующего" запроса такого как с одиночной кавычкой к любому php-скрипту на сайте с PHPIDS выводится полный пут...
Bitweaver 2.8.0 - Multiple Vulnerabilities
exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC : http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/kernel/admin/index.php?page=%27 sql injection in bitweaver 2.8 PoC : 1...
Bitweaver 2.8.1 Cross Site Scripting / SQL Injection
exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC : http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/kernel/admin/index.php?page=%27 sql injection in bitweaver 2.8 PoC : 1...
Bitweaver 2.8.0 - Multiple Vulnerabilities
Bitweaver 2.8.0 - Multiple Vulnerabilities exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC :...
NextGEN Gallery WordPress Plugin 1.7.3 Path Disclosure
Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...
Mingle Forum WordPress Plugin 1.0.28 Cross Site Scripting / Path Disclosure
================================== Vulnerability ID: HTB22849 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmingleforumwordpressplugin.html Product: Mingle Forum wordpress plugin Vendor: Cartpauj http://cartpauj.com/ Vulnerable Version: 1.0.28 Vendor Notification: 15 February 2011...
Fedora 13 : phpMyAdmin-3.3.9.2-1.fc13 (2011-1373)
Changes for 3.3.9.1 2011-02-08 - security Path disclosure, see PMASA-2011-1 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-1.php Changes for 3.3.9.2 2011-02-11 - security SQL injection, see PMASA-2011-2 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-2.php Note that Tenable...
HTB22849: Path disclosure in Mingle Forum wordpress plugin
Vulnerability ID: HTB22849 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmingleforumwordpressplugin.html Product: Mingle Forum wordpress plugin Vendor: Cartpauj http://cartpauj.com/ Vulnerable Version: 1.0.28 Vendor Notification: 15 February 2011 Vulnerability Type: Path disclosure...
Fedora 14 : phpMyAdmin-3.3.9.2-1.fc14 (2011-1408)
Changes for 3.3.9.1 2011-02-08 - security Path disclosure, see PMASA-2011-1 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-1.php Changes for 3.3.9.2 2011-02-11 - security SQL injection, see PMASA-2011-2 - http://www.phpmyadmin.net/homepage/security/PMASA-201 1-2.php Note that Tenable...
HTB22862: Path disclosure in NextGEN Gallery wordpress plugin
Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...
Уязвимости в phpMyAdmin
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Brute Force и Full path disclosure уязвимостях в phpMyAdmin. CVE id: CVE-2011-0986. Brute Force WASC-11: http://site/phpmyadmin/ В форме логина нет защиты от Brute Force атак. Full path disclosure WASC-13: http://site/phpmyadmin/readme.php если не...