PT-2005-5178 · Spiremedia · Spiremedia Mx7

Name of the Vulnerable Software and Affected Versions: SpireMedia mx7 affected versions not specified Description: A SQL injection issue in index.cfm allows remote attackers to potentially execute arbitrary SQL commands via the cid parameter. This might also lead to path disclosure from invalid S...

DEBIAN-CVE-2005-4463

WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to 1 wp-includes/vars.php, 2 wp-content/plugins/hello.php, 3 wp-admin/upgrade-functions.php, 4 wp-admin/edit-form.php, 5 wp-settings.php, and 6 wp-admin/edit-form-comment.php, which leaks the path ...

CVE-2005-4463

WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to 1 wp-includes/vars.php, 2 wp-content/plugins/hello.php, 3 wp-admin/upgrade-functions.php, 4 wp-admin/edit-form.php, 5 wp-settings.php, and 6 wp-admin/edit-form-comment.php, which leaks the path ...

[ECHO_ADV_24$2005] Full path disclosure on WordPress < 1.5.2

ECHO.OR.ID ECHOADV24$2005 --------------------------------------------------------------------------- ECHOADV24$2005 Full path disclosure on WordPress 1.5.2 --------------------------------------------------------------------------- Author: Dedi Dwianto Date: Dec, 20th 2005 Location: Indonesia,...

CVE-2005-4405

redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid 1 yellowpageid, 2 skinid, 3 supplierid, and 4 module parameters, which leaks the path in an error message...

CVE-2005-4373

Adaptive Website Framework AWF 2.10 and earlier allows remote attackers to obtain the full path of the application via an invalid mode parameter to community.html, which leaks the path in an error message...

CVE-2005-4384

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid 1 fuseaction parameter to index.cfm and 2 documentid parameter to document/docWindow.cfm...

CVE-2005-4373

Adaptive Website Framework AWF 2.10 and earlier allows remote attackers to obtain the full path of the application via an invalid mode parameter to community.html, which leaks the path in an error message...

CVE-2005-4384

CVE-2005-4384 affects CitySoft Community Enterprise 4.x. The vulnerability enables remote attackers to disclose the server’s full path via invalid parameters: (1) fuseaction in index.cfm and (2) documentid in document/docWindow.cfm. The connected documents provide this concrete detail; no vendor/...

CVE-2005-4373

The CVE concerns Adaptive Website Framework (AWF) ≤ 2.10. The vulnerability arises from an invalid mode parameter to community.html, which causes an error message that leaks the full path of the application. This is a path disclosure affecting confidentiality (partial). The available sources (NVD...

CVE-2005-4368

roundcube webmail Alpha, with a default high verbose level $rcmailconfig'debuglevel' = 1, allows remote attackers to obtain the full path of the application via an invalidtask parameter, which leaks the path in an error message...

CVE-2005-4384

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid 1 fuseaction parameter to index.cfm and 2 documentid parameter to document/docWindow.cfm...

wordpress -- full path disclosure

Dedi Dwianto reports: A remote user can access the file directly to cause the system to display an error message that indicates the installation path. The resulting error message will disclose potentially sensitive installation path information to the remote attacker...

[Full-disclosure] phpBB 2.0.18 XSS and Full Path Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpBB 2.0.18 XSS and Full Path Disclosure cXIb8O3.22 Author: Maksymilian Arciemowicz cXIb8O3 Date: 16.12.2005 from securityreason.com TEAM - --- 0.Description --- phpBB is a high powered, fully scalable, and highly customizable Open Source bulletin...

Round Cube Webmail 0.1 -20051021 - Full Path Disclosure

Round Cube Webmail 0.1 -20051021 - Full Path Disclosure source: https://www.securityfocus.com/bid/15920/info Round Cube will reportedly reveal its installation path in an error message output to the client. The filesystem layout can be sensitive information that is useful in other attacks against...

CONTENS "search.cfm" Multiple Input Validation Vulnerabilities

CONTENS "search.cfm" Multiple Input Validation Vulnerabilities Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/contens-searchcfm-multiple-input.html vendor:http://www.contens.com affected version:3.0 and prior Product Description: CONTENS Software...

Round Cube Webmail 0.1 -20051021 - Full Path Disclosure

source: https://www.securityfocus.com/bid/15920/info Round Cube will reportedly reveal its installation path in an error message output to the client. The filesystem layout can be sensitive information that is useful in other attacks against the target server. The trigger for this behavior is not...

RED QUEEN Path Disclosure

RED QUEEN Path Disclosure Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/red-queen-path-disclosure.html vendor:http://www.randommouse.com/cgi-bin/rms/ product/about/aboutproduct.cgi?sku=REDQN &referer=hotscripts&creative=linkindexing affected...

bitweaver multiple vuln.

bitweaver multiple vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/bitweaver-multiple-vuln.html vendor:bitweaver.org affected version: 1.1 and 1.1.1 beta and prior Product Description: bitweaver is a rename of the TikiPro software, and is a...

LIMBO CMS <= v1.0.4.2 _SERVER[] array overwrite / remote code execution

LIMBO CMS = v1.0.4.2 SERVER array overwrite / blind SQL injection / cross site scripting / local file inclusion / path disclosure / remote code/commands execution software: site: http://www.limbo-cms.com/ description: "Putting it in short Limbo is a Content Management System, which allows you to...