CVE-2006-1375

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...

Design/Logic Flaw

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...

CVE-2006-1375

AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via 1 a blank campaignId parameter to editCampaign.php and 2 a blank schemeId parameter to viewPricingScheme.php...

CVE-2006-1375

CVE-2006-1375 affects AdMan 1.0.20051221 and earlier. The vulnerability allows remote attackers to obtain the full server path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php. Affected components are the PHP scripts handling cam...

CVE-2006-1340

CVE-2006-1340 affects CuteNews 1.4.1 (and possibly earlier) and involves a remote path-disclosure vulnerability. The description notes that an invalid file path could allow an attacker to obtain the installation path via unspecified vectors. The CVSS basis from NVD is 5.0 (Medium) with network ac...

Noah's Classifieds Multiple Path Disclosure and Cross Site Scripting Vulnerabilities

I have contacted PhpOutsourcing 2 weeks ago, and they didn't answer. The mail I sent on classifieds AT phpoutsourcing DOT com bounced back in error. The one I sent on askme AT phpoutsourcing DOT com never got replied. "Currently, we are completely overloaded with our running projects, and we don'...

Path Disclosure and Arbitrary File Read Vulnerability in SLAB5000

Description SLAB500 is a complete, dynamic, modular web-system designed to your specifications, allowing you to quickly and conveniently update all your content, add new pages, upload images, sounds and video from any browser, via our front-end interface from any location that you have web access...

SQL-injection and XSS in photokorn gallery

Advisory: SQL-injection and XSS in photokorn gallery Home Page: http://www.telekorn.com Уязвимость/Vulnerability: SQL-injection Уязвимый скрипт/Vulnerable script: search.php http://www.stockvault.net/gallery/search.php?action=search&type=detail&where=keywords'&keyword=dotted Раскрытие установочно...

MyBB 1.10 Full Path Disclosure

D3vil-0x1 | Devil-00 New MyBB bug that will giv you the ' Full Path Disclosure ' at vic. server MyBB 1.10 .. New Bugs 1- Full Path Disclosure = mybb/polls.php?action=vote&pid=PID&option=null - Where PID Poll ID...

CVE-2006-1030

Unspecified vulnerability in modtemplatechooser in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via an unspecified attack vector that reveals the path...

Cpanel Path Disclosure Vulnerability

Cpanel hsa the vulnerability to discover the path of the files exp: loginto your cpanel account goto fantastico try to install one of the scripts ! exp: 4images if the server set a permission on the /tmp , cpanel tmp files yuo should see this Warning: main/home/userid/publichtml/fantversion.php:...

Advisory-17.txt

/ --------------------------------------------------------------- Neo Security Team NST® WordPress 2.0.1 Multiple Vulnerabilities --------------------------------------------------------------- Program : WordPress 2.0 Homepage: http://www.wordpress.org Vulnerable Versions: WordPress 2.0.1 & lower...

joomla.txt

RST/GHC -- JOOMLA CMS -- ADVISORY 37 Product: Joomla Affected version: 1.0.7 Last version: 1.0.7 Vendor: Joomla! URL: http://www.joomla.org/ online demo: http://demo.joomla.org/ VULNERABILITY CLASS: DoS, path disclosing Product Description Joomla! is a Content Management System CMS created by the...

CVE-2006-0909

Invision Power Board IPB 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP scripts that include the full path in error messages, including 1 PEAR/Text/Diff/Renderer/inline.php, 2 PEAR/Text/Diff/Renderer/unified.php, 3 PEAR/Text/Diff3.php,...

WordPress 2.0.1 Multiple Vulnerabilities

/ --------------------------------------------------------------- Neo Security Team NST® WordPress 2.0.1 Multiple Vulnerabilities --------------------------------------------------------------- Program : WordPress 2.0 Homepage: http://www.wordpress.org Vulnerable Versions: WordPress 2.0.1 & lower...

downloadingbirds.txt

------=Part484324652682.1140705114354 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe:http://www.silitoad.org Info Website: http://www.downloadingbirds.atknet.sk/ Version: a...

noccw_10_incl_xpl.txt

------ NOCC Webmail remote code execution / / cross site scripting / path disclosure -------------------------------------------------------------------------------- software: site: http://nocc.sourceforge.net/ description: "NOCC is a webmail client written in PHP. It provides webmail access to...

NoahMultiple.txt

KAPDA New advisory Vendor: http://classifieds.phpoutsourcing.com Vulnerable: Noahs classifieds 1.3 and below classifieds component for mambo also may be affected Bug: Path Disclosure,Sql Injection,XSS,Local file inclusion,Remote code execution Exploitation: Remote with browser Exploit:available...

CVE-2006-0895

NOCC Webmail 1.0 is affected by CVE-2006-0895. A remote attacker can obtain the installation path by making a direct request to html/header.php, exposing information about the webroot. The available sources describe the vulnerability as a path disclosure that affects NOCC Webmail 1.0; no addition...

CVE-2006-0878

Noah's Classifieds 1.3 is affected by a path disclosure vulnerability in which remote attackers can obtain the installation path via a direct request to include files (example: classifieds/gorum/category.php). The root cause is a file inclusion/path traversal issue that exposes server paths. Vers...