Multiple vulnerabilities in ZanfiCmsLite

AuThor:Cracklove emA!l:CrackloveatGmaildotCom HoMePaGe:http://ProxySky.com Info Website: http://www.zanfi.nl Version: 1.1,The Newest Version Problem: Full path disclosure,Include file Vuls 1.Full path disclosure: Let's try to request like this: http://localhost/cms/admpages.php and we get standar...

Multiple vulnerabilities in BlackBoard

Multiple vulnerabilities in BlackBoard AuThor:Cracklove emA!l:CrackloveatGmaildotCom HoMePaGe:http://ProxySky.com Info Website: http://blackboard.unclassified.de Version: 1.5.1,Maybe prior Problem: Full path disclosure,Include file Vuls 1.Full path disclosure: Let's try to request like this:...

Full path disclosure and sql injection on CubeCart 2.0.1

-------------------------------------------------------- Full path disclosure and sql injection on CubeCart 2.0.1 -------------------------------------------------------- 1Introduction 2The Problem 3The Solution 4Timeline 5Feddback 1Introduction "CubeCart is an eCommerce script written with PHP &...

Echo Security Advisory 2004.7

ECHOADV07$2004 --------------------------------------------------------------------------- Multiple Vulnerabilities in AJ-Fork --------------------------------------------------------------------------- Author: y3dips Date: September, 23th 2004 Location: Indonesia, Jakarta Web:...

Full path disclosure in PHP Links

Nkxtox Advisory 0000-00003 Full path disclosure in PHP Links Date: 03/10/04 Bug: http://server/phplinks/index.php?show=juax0rx Warning: maininclude/juax0rx.php: failed to open stream: No such file or directory in /home/h4x0rsit3/b0x/phplinks/index.php on line 198 Warning: main: Failed opening...

Multiple Vulnerabilities in AJ-Fork

ECHOADV07$2004 --------------------------------------------------------------------------- Multiple Vulnerabilities in AJ-Fork --------------------------------------------------------------------------- Author: y3dips Date: September, 23th 2004 Location: Indonesia, Jakarta Web:...

Multiple vulnerabilities in ActivePost Standard 3.1

Luigi Auriemma Application: ActivePost Standard http://www.activepost.net Versions: = 3.1 Platforms: Windows Bugs: - File-Server crash - File-server directory traversal and path disclosure - conference password disclosure Risk: critical Exploitation: remote, versus server only the third bug affec...

TUTOS < 1.1.20040412 Multiple Input Validation Issues

The remote host is running Tutos, an open source team organization software package written in PHP. According to its banner, the remote version of this software is vulnerable to multiple input validation flaws that could allow an authenticated user to perform a cross-site scripting attack, path...

bbsEMarket.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20040915-07 BBS E-Market Professional multiple vulnerabilities Revision 1.0 Date Published: 2004-09-15 KST Last Update: 2004-09-15 Disclosed by SSR Team [email protected] Abstract ======== BBS E-MarketBobusang in Kore...

FUll Path Disclosure in YABBSE

ECHOADV05$2004 --------------------------------------------------------------------------- FUll Path Disclosure in YABBSE --------------------------------------------------------------------------- Author: y3dips Date: August, 25th 2004 Location: Indonesia, Jakarta Web:...

CVE-2003-0051

CVE-2003-0051 affects Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1, where parse_xml.cgi can reveal the server installation’s physical path via a NULL file parameter. The issue enables remote access to sensitive path information and is part of a set of re...

CVE-2002-1132

SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script...

Qualcomm Eudora Client and Path Disclosure Vulnerability

Binary data 1288.prm...

Netscape/Mozilla Navigator Plugin Path Disclosure (deprecated)

Binary data 1313.prm...

Mozilla < 1.0.1 Plugin Path Disclosure (deprecated)

Binary data 1761.prm...

AOL Instant Messenger File Transfer Path Disclosure

Binary data 1255.prm...

MailMax/Web Remote Installation Path Disclosure

Binary data 1765.prm...

Serv-U < 2.5e CWD Command Path Disclosure

Binary data 1837.prm...

Apache Tomcat < 3.2.1 Nonexistent File Error Message Path Disclosure

Binary data 1465.pasl...

Vulnerabilities in Merak Webmail Server.

CRIOLABS http://www.criolabs.net - Software: Merak Webmail Server - Type: Webmail - Company: Merak Mail Server, Inc. Software Software: Merak Webmail Server Version: 5.2.7 Plataforms: All Windows platforms Web: http://www.merakmailserver.com/ Vendor Description Merak's WebMail Server is used by...