4796 matches found
Fedora 16 : phpMyAdmin-3.5.2.2-1.fc16 (2012-12060)
phpMyAdmin 3.5.2.2 2012-08-12 =============================== - security Fixed XSS vulnerabilities, see PMASA-2012-4 http://www.phpmyadmin.net/homepage/security/PMASA-2012 -4.php phpMyAdmin 3.5.2.1 2012-08-03 =============================== - security Fixed local path disclosure vulnerability, se...
Douran CMS Path Disclosure
Title: Douran CMS Full Path Disclosure Vulnerability Vulnerable Version: all versions Vendor URL: http://douran.com Impact: Low =========================== Vulnerability Description: =========================== Full Path Disclosure Vulnerability, enable the attacker to see the root path...
Paliz CMS Path Disclosure
Title: Paliz CMS Full Path Disclosure Vulnerability Vulnerable Version: all versions Vendor URL: http://palizct.com Impact: Low =========================== Vulnerability Description: =========================== Full Path Disclosure Vulnerability, enable the attacker to see the root path...
Discuz X2.5最新版爆路径
简要描述： Discuz X2.5最新版爆路径 详细说明： 漏洞证明： http://www.erdare.com/source/plugin/myrepeats/table/tablemyrepeats.php...
CVE-2012-4674
PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID...
CVE-2012-4674
PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID...
PT-2012-5541
Name of the Vulnerable Software and Affected Versions PluXml versions prior to 5.1.6 Description The issue allows remote attackers to obtain the installation path via the PHPSESSID. Recommendations For versions prior to 5.1.6, update to version 5.1.6 or later to resolve the issue...
CVE-2012-4332
The ShareYourCart plugin 1.7.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors related to the SDK...
WordPress ShareYourCart Plugin <= 1.7.1 - Path Disclosure
Because of this vulnerability, the attackers can obtain the installation path via unspecified vectors related to the SDK. Solution Update the plugin...
CVE-2012-2327
The CVE-2012-2327 issue affects MyBB (MyBulletinBoard) versions prior to 1.6.7. A malformed forumread cookie can cause an error message to reveal the installation path, enabling information disclosure. The vulnerability arises from how the application handles the cookie and error reporting. The d...
FreeBSD : phpMyAdmin -- Path disclosure due to missing library (aca0d7e0-e38a-11e1-999b-e0cb4e266481)
The phpMyAdmin development team reports : The showconfigerrors.php script does not include a library, so an error message shows the full path of this file, leading to possible further attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Discuz X2 路徑洩漏
简要描述： 缺少 exit‘Access Denied’; 直接浏览该程序直接报错 BTW 一共发现了7个 XSS 包含储存式跟反射式. 等之后整完整點再发出来 详细说明： 檔案路徑: /source/include/misc/miscranklistindex.php 漏洞证明：...
Path disclosure due to missing library.
PMASA-2012-3 Announcement-ID: PMASA-2012-3 Date: 2012-08-09 Summary Path disclosure due to missing library. Description The showconfigerrors.php script does not include a library, so an error message shows the full path of this file, leading to possible further attacks. Severity We consider this...
Drupal 7.14 <= full path disclosure-vulnerability warning-the black bar safety net
Drupal 7.14 = Full Path Disclosure Vulnerability About Drupal: "Drupal is an open source content management platform powering millions of websites and applications. It's built, used, and supported by an active and diverse community of people around the world." Drupal is used by common companies...
GetSimple CMS 3.1.2 Local File Inclusion / Path Disclosure
=========================================================================== Author: PuN!Sh3r Vulnerable Software: GetSimple CMS v 3.1.2 Official Site: http://get-simple.info/download/ =========================================================================== Hi to All.. We have Path Disclosure...
phpMyAdmin -- Path disclosure due to missing library
The phpMyAdmin development team reports: The showconfigerrors.php script does not include a library, so an error message shows the full path of this file, leading to possible further attacks...
cmseasy由于错误信息处理不当导致爆路径
简要描述： 我记得我前段时间就在法客论坛发表了一个爆路径的洞洞没想还存在爆路径 详细说明： http://demo.cmseasy.cn/99/index.php?case=archive&act=search 还是这里的问题...
ShopEx敏感信息泄露漏洞
简要描述： 直接爆路径，部分可能爆500. 详细说明： inurl:page-notice.html intitle:顾客必读 新手上路 或者：本商店顾客个人信息将不会被泄漏给其他任何机构和个人本商店logo和图片都已经申请保护，不经授权不得使用 访问：install/install.core.php 直接爆路径，部分可能爆500. 漏洞证明： 测试了下官方推荐的成功案例网站： 绝大多数都能爆出路径。 如果利用之前的SQL注入应该可以导出一句话。...
PT-2012-5124
Name of the Vulnerable Software and Affected Versions TikiWiki CMS/Groupware versions 8.3 and earlier Description The issue allows remote attackers to obtain the installation path via a direct request to API endpoints such as "admin/include calendar.php", "tiki-rss error.php", or "tiki-watershed...
WordPress all Version full Path Disclosure Vulnerability
Exploit for php platform in category web applications ================================================================================ || | | || || || |/ | || |/ I Love Palestine | | | | | | | | | | | \ | | | | \ ================================================================================...