Concrete5 <= 5.4.2.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Concrete5 = 5.4.2.1 SQL Injection and XSS Vulnerabilities Date: 2011-10-04 Author: Ryan Dewhurst ryandewhurst at gmail @ethicalhack3r www.ethicalhack3r.co.uk Software Link:...

XSS и FPD уязвимости в Adobe ColdFusion

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых уязвимостях в Adobe ColdFusion. Это Cross-Site Scripting и Full path disclosure уязвимости. XSS WASC-08: http://site/CFIDE/componentutils/componentdetail.cfm?component=3Cbody20onload=alertdocument.cookie3E...

dotProject '.php' Files Installation Path Disclosure Vulnerability

The host is running dotProject and is prone to path disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpoddotprojectphpfileinstallpathdiscvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ dotProject '.php' Files Installation Path Disclosure Vulnerability Authors: Madhuri D Copyright: Copyrig...

Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities (Sep 2011)

Adobe ColdFusion is prone to multiple full path disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

dotProject <= 2.1.4 Information Disclosure Vulnerability - Active Check

dotProject is prone to a path disclosure vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities

The host is running Adobe ColdFusion and is prone to multiple full path disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobecoldfusionmultiplefpdvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities Authors: Sooraj KS...

Adobe ColdFusion 7 Cross Site Scripting

Hello list! I want to warn you about new security vulnerabilities in Adobe ColdFusion. These are Cross-Site Scripting and Full path disclosure vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are Adobe ColdFusion 7 and previous versions to XSS, an...

CVE-2011-3795

Podcast Generator 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by core/themes.php and certain other files...

CVE-2011-3762

OpenBlog 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files...

Information disclosure

PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/createacct.php and certain other files...

Information disclosure

TomatoCart 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/system/offline.php and certain other files...

CVE-2011-3760

CVE-2011-3760 affects Nucleus CMS 3.61, where remote attackers can trigger a direct request to a PHP file (e.g., xmlrpc/api_nucleus.inc.php) to disclose the installation path via an error message. The NVD and related records confirm this information disclosure vector and name the affected file pa...

PT-2011-4703

Name of the Vulnerable Software and Affected Versions Virtual War aka VWar version 1.5.0r15 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as includes/language/dutch.inc.php, whi...

CVE-2011-3787

phpScheduleIt 1.2.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/schedule.template.php and certain other files...

PT-2011-4656

Name of the Vulnerable Software and Affected Versions OrangeHRM version 2.6.0.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing certain files, such as themes/orange/menu/Menu.php, which reveals th...

CVE-2011-3791

CVE-2011-3791 affects Piwik 1.1 and enables information disclosure through direct requests to PHP files (e.g., plugins/Widgetize/Widgetize.php), revealing installation paths in error messages. Root cause: error output leaks path information. Impact: partial confidentiality loss via remote access;...

CVE-2011-3777

phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/zilveer/style.css.php and certain other files...

CVE-2011-3775

PHPfileNavigator 2.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xestion/varios/logs.inc.php and certain other files...

CVE-2011-3770: Exposure of Sensitive Information to an Unauthorized Actor

phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/FlowingDark/parameters.tpl.php and certain other files...

CVE-2011-3748

Kamads Classifieds 2B3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by V2AXHTML/style/view.php and certain other files...