Mandriva Update for phpmyadmin MDVSA-2011:026 (phpmyadmin)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

ArtGK CMS Path Disclosure

Vulnerability ID: HTB22832 Reference: http://www.htbridge.ch/advisory/pathdisclosureinartgkcms.html Product: ArtGK CMS Vendor: ArtGK http://artgk-cms.ru/ Vulnerable Version: 2009-08-28 16:00:00 and Probably Prior Versions Vendor Notification: 01 February 2011 Vulnerability Type: Path disclosure...

RunCMS 2.2.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================ Vulnerability ID: HTB22820 Reference: http://www.htbridge.ch/advisory/sqlinjectioninruncms.html Product: RunCMS Vendor: http://www.runcms.org/ http://www.runcms.org/ Vulnerable Version: 2.2.2 Vendor Notificatio...

HTB22832: Path disclosure in ArtGK CMS

Vulnerability ID: HTB22832 Reference: http://www.htbridge.ch/advisory/pathdisclosureinartgkcms.html Product: ArtGK CMS Vendor: ArtGK http://artgk-cms.ru/ Vulnerable Version: 2009-08-28 16:00:00 and Probably Prior Versions Vendor Notification: 01 February 2011 Vulnerability Type: Path disclosure...

HTB22829: Path disclosure in Xaraya

Vulnerability ID: HTB22829 Reference: http://www.htbridge.ch/advisory/pathdisclosureinxaraya.html Product: Xaraya Vendor: Xaraya Development Group http://www.xaraya.com/ Vulnerable Version: 2.2.0 beta 1 Vendor Notification: 01 February 2011 Vulnerability Type: Path disclosure Risk level: Low...

Installation Path Disclosure Weakness in NextGEN Gallery wordpress plugin

High-Tech Bridge SA Security Research Lab has discovered a weakness in NextGEN Gallery wordpress plugin which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in NextGEN Gallery wordpress plugin The weakness exists due to application...

Xaraya 2.2.0 Beta 1 Path Disclosure

Vulnerability ID: HTB22829 Reference: http://www.htbridge.ch/advisory/pathdisclosureinxaraya.html Product: Xaraya Vendor: Xaraya Development Group http://www.xaraya.com/ Vulnerable Version: 2.2.0 beta 1 Vendor Notification: 01 February 2011 Vulnerability Type: Path disclosure Risk level: Low...

Multiple Vulnerabilities in Mingle Forum wordpress plugin

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Mingle Forum wordpress plugin which could be exploited to perform script insertion attacks and disclose potentially sensitive information. 1 Script insertion vulnerability in Mingle Forum wordpress plugin Input passed to...

CVE-2011-0986

phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the 1 README, 2 ChangeLog, and 3 LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file...

CVE-2011-0986

phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the 1 README, 2 ChangeLog, and 3 LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file...

CVE-2011-0986

CVE-2011-0986 affects phpMyAdmin: versions 2.11.x before 2.11.11.2 and 3.3.x before 3.3.9.1, where the software mishandles missing README, ChangeLog, and LICENSE files. This enables remote attackers to discover the installation path by directly requesting a nonexistent file. Impact described as i...

CVE-2011-0986

phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the 1 README, 2 ChangeLog, and 3 LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file...

CVE-2011-0986

phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the 1 README, 2 ChangeLog, and 3 LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file...

RunCMS 2.2.2 - Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98472/runcms-sqlxss.txt ================================ Vulnerability ID: HTB22820 Reference: http://www.htbridge.ch/advisory/sqlinjectioninruncms.html Product: RunCMS Vendor: http://www.runcms.org/ http://www.runcms.org/ Vulnerable Version: 2.2....

RunCMS 2.2.2 - Multiple Vulnerabilities

RunCMS 2.2.2 - Multiple Vulnerabilities Source: http://packetstormsecurity.org/files/view/98472/runcms-sqlxss.txt ================================ Vulnerability ID: HTB22820 Reference: http://www.htbridge.ch/advisory/sqlinjectioninruncms.html Product: RunCMS Vendor: http://www.runcms.org/...

Kunena SQL Injection Vulnerability & Information Leakage

Vendor/Product: Kunena Vulnerable Versions: 1.5.14; 1.6.3 Vulnerability Type: SQL Injection & information leakage Risk level: High Vulnerability Details: Because parameterized queries were not used, and adequate input sanitization was not done on the catids parameter on the advanced search page, ...

FreeBSD : phpMyAdmin -- multiple vulnerabilities (cd68ff50-362b-11e0-ad36-00215c6a37bb)

phpMyAdmin team reports : It was possible to create a bookmark which would be executed unintentionally by other users. When the files README, ChangeLog or LICENSE have been removed from their original place possibly by the distributor, the scripts used to display these files can show their full...

RunCMS 2.2.2 Cross Site Scripting / Path Disclosure / SQL Injection

================================ Vulnerability ID: HTB22820 Reference: http://www.htbridge.ch/advisory/sqlinjectioninruncms.html Product: RunCMS Vendor: http://www.runcms.org/ http://www.runcms.org/ Vulnerable Version: 2.2.2 Vendor Notification: 27 January 2011 Vulnerability Type: SQL Injection...

CVE-2011-0986: Improper Input Validation

phpMyAdmin 2.11.x before 2.11.11.2, and 3.3.x before 3.3.9.1, does not properly handle the absence of the 1 README, 2 ChangeLog, and 3 LICENSE files, which allows remote attackers to obtain the installation path via a direct request for a nonexistent file...

PT-2011-2794

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 2.11.x through 2.11.11.1 phpMyAdmin versions 3.3.x through 3.3.9.0 Description The issue arises from improper handling of missing files, specifically the README, ChangeLog, and LICENSE files. This allows remote attackers to...