Design/Logic Flaw

theme/yuicombo.php in Moodle 2.3.x before 2.3.2 does not properly construct error responses for the drag-and-drop script, which allows remote attackers to obtain the installation path by sending a request for a nonexistent resource and then reading the response...

WordPress 3.4.2 - Multiple Path Dislosure Vulnerabilities

WordPress 3.4.2 version is prone to multiple path dislosure vulnerabilities that can be used by remote attackers to obtain sensitive information that may lead to further attacks. Solution Update WordPress...

WordPress 3.4.2 - Multiple Path Disclosure Vulnerabilities

WordPress 3.4.2 - Multiple Path Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/55597/info WordPress is prone to multiple path-disclosure vulnerabilities. Remote attackers can exploit these issues to obtain sensitive information that may lead to further attacks. WordPress 3.4...

WordPress 3.4.2 User Enumeration / Path Disclosure

============================================================ Vulnerable Software: WordPress Version 3.4.2 Downloaded from: http://wordpress.org/latest.zip MD5SUM: d670508d81e2fd060c2041441bc03300 wordpress-3.4.2.zip =========================================================== Tested: php.ini...

WordPress Core 3.4.2 - Multiple Path Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/55597/info WordPress is prone to multiple path-disclosure vulnerabilities. Remote attackers can exploit these issues to obtain sensitive information that may lead to further attacks. WordPress 3.4.2 is vulnerable; other versions may also be affected...

Fedora 18 : phpMyAdmin-3.5.2.2-1.fc18 (2012-11962)

phpMyAdmin 3.5.2.2 2012-08-12 =============================== - security Fixed XSS vulnerabilities, see PMASA-2012-4 http://www.phpmyadmin.net/homepage/security/PMASA-2012 -4.php phpMyAdmin 3.5.2.1 2012-08-03 =============================== - security Fixed local path disclosure vulnerability, se...

Wordpress 3.X.X and prior - Path Disclosure/File Inclusion Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

WordPress Tierra Audio Path Disclosure

Title : Wordpress-Tierra Audio Full Path Disclosure/Directory Listing Vulnerabilities. Author : Dark-Puzzle Souhail Hammou Date : 14th September 2012 Risk : Low Tested On : Windows XP SP3 - Fr & Backtrack 5 R3 Greetings : Inj3ct0rs - Offensive Security - Security Focus - Packetstorm Security...

CVE-2012-0837

Joomla! CVE-2012-0837 affects Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1. The issue is an information-disclosure vulnerability that allows attackers to obtain the installation path via unspecified vectors related to the administrator area. The available documents do not provide root-cause ...

WordPress BBPress SQL Injection / Path Disclosure

No description provided by source. Exploit Title: Wordpress plugins - bbpress Multiple Vulnerabilities. Date: 31 August 2012 Author: Dark-Puzzle Souhail Hammou Vendor Website : www.bbpress.ru / www.bbpress.com Risk : Critical Version: All Versions Google Dork : N/A Category: Webapps/0day Tested o...

Paliz CMS Full Path Disclosure Vulnerability

Title: Paliz CMS Full Path Disclosure Vulnerability Vulnerable Version: all versions Vendor URL: http://palizct.com Impact: Low =========================== Vulnerability Description: =========================== Full Path Disclosure Vulnerability, enable the attacker to see the root path...

Sistem Biwes Multiple Vulnerability`

=================================================================== Sistem Biwes Multiple Vulnerability =================================================================== Author: eidelweiss @randyarios Product / software: SISTEM BIWES Vendor Site: http://sistembiwes.com/ Product Price: RM240 /...

Joomla ICAgenda SQL Injection / Path Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

WordPress NextGen Cu3er Gallery Information Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

WordPress BBPress SQL Injection / Path Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Joomla Component com_icagenda Blind SQLi/Path Disclosure

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

FreeBSD : coppermine -- Multiple vulnerabilities (6dd5e45c-f084-11e1-8d0f-406186f3d89d)

The Coppermine Team reports : The release covers several path disclosure vulnerabilities. If unpatched, it's possible to generate an error that will reveal the full path of the script. A remote user can determine the full path to the web root directory and other potentially sensitive information...

Sistem Biwes Multiple Vulnerability

Exploit for php platform in category web applications =================================================================== Sistem Biwes Multiple Vulnerability =================================================================== Google Dork: "Powered by sistembiwes.com" Author: eidelweiss @randyario...

Sistem Biwes SQL Injection / Path Disclosure

=================================================================== Sistem Biwes Multiple Vulnerability =================================================================== Author: eidelweiss @randyarios Product / software: SISTEM BIWES Vendor Site: http://sistembiwes.com/ Product Price: RM240 /...

Fedora 17 : phpMyAdmin-3.5.2.2-1.fc17 (2012-12031)

phpMyAdmin 3.5.2.2 2012-08-12 =============================== - security Fixed XSS vulnerabilities, see PMASA-2012-4 http://www.phpmyadmin.net/homepage/security/PMASA-2012 -4.php phpMyAdmin 3.5.2.1 2012-08-03 =============================== - security Fixed local path disclosure vulnerability, se...