PHP Surveyor Multiple Vulnerabilities

The remote host is running PHP Surveyor, a set of PHP scripts used to develop, publish and collect responses from surveys. The remote version of this software contains multiple vulnerabilities that can lead to SQL injection, path disclosure and cross-site scripting. %NASLMINLEVEL 70300 Josh...

CVE-2005-2652

Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to 1 gorum/notification.php, 2 user.php, 3 attach.php, 4 blacklist.php, 5 zorum/forum.php, 6 globalstat.php, 7 gorum/trace.php, 8 gorum/badwords.php, or 9 gorum/flood.php...

CVE-2005-2652

Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to 1 gorum/notification.php, 2 user.php, 3 attach.php, 4 blacklist.php, 5 zorum/forum.php, 6 globalstat.php, 7 gorum/trace.php, 8 gorum/badwords.php, or 9 gorum/flood.php...

CVE-2005-2604

Technical details for CVE-2005-2604 are not publicly available in the provided documents. Monitor for updates and new connected sources to confirm affected product/version, root cause, impact, and remediation.

CVE-2005-2604

index.php for My Image Gallery Mig 1.4.1 allows remote attackers to obtain the web server path via certain currDir and image arguments, which leaks the path in an error message...

CVE-2005-2609

index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full server path via an invalid VDNSSessid parameter...

CVE-2004-2362

PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php...

CVE-2005-2565

Gravity Board X GBX 1.1 allows remote attackers to obtain sensitive information via 1 a 1 in the perm parameter to deletethread.php or a direct request to 2 ban.php, 3 addnews.php, 4 banned.php, 5 boardstats.php, 6 adminform.php, 7 /forms/admininfo.php, 8 /forms/announcements.php, 9...

postnuke0760rc3.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke XSS and Full path disclosure 0.760RC3=x cXIb8O3.7 Author: Maksymilian Arciemowicz cXIb8O3 Date: 15.3.2005 from SECURITYREASON.COM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 and 0.760RC3 PostNuke is an open source, open...

wordpress15sql.txt

--------------------------------------------------- | BuHa Security-Advisory 1 | May 17th, 2005 | --------------------------------------------------- | Vendor | Wordpress | | URL | http://wordpress.org/ | | Version | getvar"SELECT pingstatus FROM $wpdb-posts WHERE ID = $tbid"; Example: I converte...

Xoops 2.2.1 Full Path Disclosure

Xoops 2.2.1 Full Path Disclosure !!! http://target/include/registerform.php code Warning: mainXOOPSROOTPATH/class/xoopslists.php: failed to open stream: No such file or directory in /home/publichtml/site/include/registerform.php on line 28 Warning: main: Failed opening...

Full path disclosure in CaLogic 1.22 and possible in older versions.

Full path disclosure in CaLogic 1.22 and possible in older versions. Language: PHP Project name: CaLogic Risk: Low Home page: http://www.calogic.de Discovered by: GB & Zetha Explotation examples: http://target/calogic122/doclsqlres.php Fatal error: Call to a member function on a non-object in...

vegadns-dyn0.txt

VegaDNS XSS ----------- Desc: Multiple vulns in VegaDNS Risk: Medium to High Discovered by : dyn0 codeslaghatgmail.com http://0xdeadface.co.uk Project blurb : VegaDNS is a tinydns administration tool written in PHP to allow easy administration of DNS records through a web browser. Affected Versio...

Gravity Board X v1.1 multiple vulnerabilities

4.22 07/08/2005 Gravity Board X v1.1 possibly prior versions Remote code execution, SQL Injection / Login Bypass, cross site scripting, path disclosure poc software: author site: http://www.gravityboardx.com/ a Sql Injection / Login Bypass: A user can bypass login check and grant administrator...

pwpphp122.txt

PwsPHP v1.2.2 Final - Multiples vulnerabilities ----------------------------------------------- VULNERABLE PRODUCT ------------------ Forum: Pwsphp Version: 1.2.2 Final Vulnerabilities: Multiples -------------------------- / / / / / / / / / / / \ / // / /// // / // / / / / // / / .///// / .//...

Clever Copy Multiple Vulnerabilities (XSS, Path Disc, Inf Disc)

The remote host is running Clever Copy, a free, fully-scalable web site portal and news posting system written in PHP The remote version of this software contains multiple vulnerabilities that can lead to path disclosure, cross-site scripting and unauthorized access to private messages...

UltimatePHPBoard.txt

Ultimate PHP Board UPB Security Advisory By : Morinex e-mail : morinexatmarocmafia com date : 13-05-2k5 shoutz : w00pie.nl Target : Ultimate PHP Board UPB Vulnerable Versions: v. 1.8 until v 1.9.6 URL : http://www.myupb.com - http://www.myupb.com/forum/ Tested Localhost , Myupb.com. UPB is a...

dt_Multiple_vuln.txt

------------------------------------------------------------------------ Directtopics Multiple Vulnerabilities By : Morinex e-mail : [email protected] date : 08-04-2k5 shoutz : w00pie.nl Target : Directtopics Vulnerable Versions: DT 2 beta , DT2 final, 2.1, and 2.2 URL : www.directtopics.nl ...

HexView Security Advisory 0405-20-05.05

ShineShadow Security Report 04052005-05 TITLE: Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest,...

FlatNuke 2.5.5 (possibly prior versions) remote commands execution / cross site scripting / path disclosure (by rgod)

0.34 2005-08-05 FlatNuke 2.5.5 possibly prior versions remote commands execution / cross site scripting / path disclosure by rgod release date: 2005-07-20 software: author site: http://flatnuke.sourceforge.net/ path disclosure: http://target/path/themes/butterfly/structure.php supllying a null by...