4338 matches found
PT-2005-4313 · Chipmunk Scripts · Chipmunk Scripts Guestbook
Name of the Vulnerable Software and Affected Versions: Chipmunk Scripts Guestbook affected versions not specified Description: The issue allows remote attackers to obtain the installation path of the script by causing an error message to be displayed. This can be achieved through a URL that...
Mambo Open Source, Path disclosure
KAPDA::11 - Mambo Open Source, Path disclosure KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.5.2.3 , 4.5.2.2 , 4.5.2.1 ,4.5.2 Bug: path disclosure Exploitation: Remote with browser Discussion: -------------------- Mambo is a feature-rich dynamic portal engine/conten...
Non-Existant Page Physical Path Disclosure Vulnerability
Your web server reveals the physical path of the webroot when asked for a non-existent page. Whilst printing errors to the output is useful for debugging applications, this feature should not be enabled on production servers. OpenVAS Vulnerability Test $Id: 404pathdisclosure.nasl 6007 2017-04-21...
Apache Tomcat TroubleShooter Servlet Installed
The remote Apache Tomcat Server is vulnerable to cross script scripting and path disclosure issues. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Tutos < 1.1.20040412 Input Validation Vulnerability
Tutos is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tutos:tutos"; ifdescriptio...
Sambar CGIs path disclosure
environ.pl or testcgi.exe is installed. Those CGIs reveal the installation directory and some other information that could help an attacker. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced...
IIS 5.0 Sample App reveals physical path of web root
A sample application shipped with IIS 5.0 discloses the physical path of the web root. An attacker can use this information to make more focused attacks. OpenVAS Vulnerability Test $Id: iis5samplepath.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IIS 5.0 Sample App reveals physical path of...
PowerPortal Path Dislcosure
The remote host is using PowerPortal, a content management system, written in PHP. A vulnerability exists in the remote version of this product which may allow a remote attacker to cause the product to disclose the path it is installed under. An attacker may use this flaw to gain more knowledge...
phpAdsNew Multiple Vulnerabilities (Mar 2005) - Active Check
phpAdsNew is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
phpGedView Code injection Vulnerability
The remote host is running phpGedView, a set of CGI scripts which parse GEDCOM 5.5 genealogy files and display them on the internet in a format similar to desktop programs. There are multiple vulnerabilities in this product : - A path disclosure vulnerability, which will give more information abo...
Macromedia ColdFusion MX Path Disclosure Vulnerability
A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. SPDX-FileCopyrightText: 2003 A.D.Consulting France Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
ServletExec 4.1 ISAPI Physical Path Disclosure
By requesting a non-existent .JSP file, or by invoking the JSPServlet directly and supplying no filename, it is possible to make the ServletExec ISAPI filter disclose the physical path of the webroot. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a...
Inktomi Search Physical Path Disclosure
This web server is running a vulnerable version of Inktomi Search Certain requests using MS-DOS special file names such as nul can cause a python error. The error message contains sensitive information such as the physical path of the webroot. This information may be useful to an attacker. OpenVA...
Macromedia ColdFusion MX Path Disclosure Vulnerability
A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests port 8500 are received by the server, an error message is returned containing the full path of the ColdFusion installation. OpenVAS...
myBloggie Multiple Vulnerabilities
myBloggie is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Tiki Wiki CMS Groupware < 1.8.2 Multiple Input Validation Vulnerabilities
Tiki Wiki CMS Groupware is prone to multiple vulnerabilities in various modules of the application. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
vubbXSS.txt
KAPDA::10 - VUBB XSS & path disclosure vulnerabilities KAPDA New advisory Vendor: http://www.vubb.com Version: vubb alpha rc1 Bug: XSS & path disclosure Exploitation: Remote with browser Discussion: -------------------- VuBB is a Free PHP/MySQL forum/bulletin board system. Vulnerability:...
VUBB XSS & path disclosure Vulnerabilities
KAPDA::10 - VUBB XSS & path disclosure vulnerabilities KAPDA New advisory Vendor: http://www.vubb.com Version: vubb alpha rc1 Bug: XSS & path disclosure Exploitation: Remote with browser Discussion: -------------------- VuBB is a Free PHP/MySQL forum/bulletin board system. Vulnerability:...
XSS & Path Disclosure in Chipmunk's products
Products: Chipmunk Forum , Topsites , Directory , Guestbook Versions: Tested: Last released of products Vendor: http://chipmunk-scripts.com Bug: XSS , Path Disclosure Exploitation: Remote --------------------------- Introduction: Chipmunk Forum is a small yet flexible and fully featured forum...
MerakXSS.txt
ShineShadow Security Report 30092005-06 TITLE: Multiple vulnerabilities in Merak Mail Server 8.2.4r with Icewarp Web Mail 5.5.1. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting- edge Merak Mail Server Instant Antispam and much more, is the fastest,...