CVE-2004-1203

parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path...

CVE-2004-1226

SugarCRM Sugar Sales 2.0.1c and earlier are affected by a vulnerability where remote attackers can cause an error message to reveal internal path information via requests to scripts with invalid input, demonstrated with phprint.php and an empty module parameter. The reliable sources describe the ...

SugarSales Multiple Vulnerabilities

------------------------------------------------------------------------- | SugarSales Multiple Vulnerabilities | ------------------------------------------------------------------------- Date: 12-11-2004 Author: Daniel Fabian Product: SugarSales formerly SugarCRM Affected Version: up to 2.0.1c...

Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ]

GulfTech Security Research December 14th, 2004 Vendor : phpGroupWare URL : http://www.phpgroupware.org Version : phpGroupWare 0.9.16.003 Risk : Multiple Vulnerabilities Description: phpGroupWare formerly known as webdistro is a multi-user groupware suite written in PHP. It provides a Web-based...

F-Secure Policy Manager Path Disclosure

The remote host is running F-Secure Policy Manager, a distributed administration software allowing a system administrator to control applications from a single web console. There is a flaw in the file '/fsms/fsmsh.dll' that discloses the physical path this application is under. An attacker could...

F-Secure Policy Manager 5.11 - FSMSH.dll CGI Application Installation Full Path Disclosure

F-Secure Policy Manager 5.11 - FSMSH.dll CGI Application Installation Full Path Disclosure source: https://www.securityfocus.com/bid/11869/info F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the...

F-Secure Policy Manager 5.11 - 'FSMSH.dll' CGI Application Installation Full Path Disclosure

source: https://www.securityfocus.com/bid/11869/info F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the vulnerable software will return an error message that includes the installation path of the...

PAFileDB Multiple Script Error Message Path Disclosure

There is a flaw in the remote version of paFileDB that may let an attacker obtain the physical path of the remote installation by sending a malformed request to one of the scripts 'admins.php', 'category.php', or 'team.php'. This information may help an attacker make more focused attacks against...

PAFileDB 3.1 - Error Message Full Path Disclosure

PAFileDB 3.1 - Error Message Full Path Disclosure source: https://www.securityfocus.com/bid/11817/info paFileDB is prone to an installation path disclosure. If invalid requests are made to certain scripts, the installation path is included in the returned error message...

waraxe-2004-SA038.txt

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...

[waraxe-2004-SA#038 - Multiple vulnerabilities in Event Calendar module for PhpNuke]

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...

Vulnerabilities in JAF CMS

ECHOADV08$2004 --------------------------------------------------------------------------- Vulnerabilities in JAF CMS --------------------------------------------------------------------------- Author: y3dips Date: November, 4th 2004 Location: Indonesia, Jakarta Web:...

Echo Security Advisory 2004.8

ECHOADV08$2004 --------------------------------------------------------------------------- Vulnerabilities in JAF CMS --------------------------------------------------------------------------- Author: y3dips Date: November, 4th 2004 Location: Indonesia, Jakarta Web:...

MailPost vulnerable to cross-site scripting via an executable requested with a trailing slash appended to the filename

Overview A cross-site scripting vulnerability is reported to exist in MailPost version 5.1.1sv and possibly earlier versions. Description According to a report by ProCheckUp, MailPost is vulnerable to a Cross-Site Scripting attack by adding a trailing '/' character to the executable filename. The...

mp-ldu.txt

Multiple SQL-injections in Land Down Under v701 Date: 30.10.04 Application: Land Down Under v701 Platform: PHP Severity: Medium Link: http://www.neocrome.net Vendor Status Vulnerabilities have been fixed. Details An input validation vulnerability was reported in Land Down Under v701. A remote use...

cht-security.txt

CHT Security Research Center-2004 http://www.CyberSpy.Org Turkey Software: CoolPHP Web Site: http://cphp.sourceforge.net/ Affected Versions: 1.0-stable Description: CoolPHP is a PHP based portal system.It requires A Web server with PHP=PHP4 support and MySQL. It's compatible with NIX and NT...

Multiple Vulnerabilities in CoolPHP

CHT Security Research Center-2004 http://www.CyberSpy.Org Turkey Software: CoolPHP Web Site: http://cphp.sourceforge.net/ Affected Versions: 1.0-stable Description: CoolPHP is a PHP based portal system.It requires A Web server with PHP=PHP4 support and MySQL. It's compatible with NIX and NT...

a path disclosure and a posibility file inclusion and vulneability in thepeak file upload v1.3

JustinT NT - Undernet [email protected] hi, there is a posiblity path disclosure and run commands on a server usint thepeak File Upload v1.3 searching for /fileupload/index.php an attacker can upload a malicious jpg of gif and can execute commands or make a file inclusion, but it cant be...

phplinks2.txt

In-Reply-To: Hi, This is also a php inclusion bug. You can include any .php script on remote system with "PHP Links". Request like this will include script "execute.php" in "/some/some" directory: www.site.com/phplinks/index.php?show=../../../../../../some/some/execute So, if you have FTP access ...

blackboard.txt

Multiple vulnerabilities in BlackBoard AuThor:Cracklove emA!l:CrackloveatGmaildotCom HoMePaGe:http://ProxySky.com Info Website: http://blackboard.unclassified.de Version: 1.5.1,Maybe prior Problem: Full path disclosure,Include file Vuls 1.Full path disclosure: Let's try to request like this:...