4796 matches found
PHP-Nuke Error Manager Module 2.1 - error.php?language Full Path Disclosure
PHP-Nuke Error Manager Module 2.1 - error.php?language Full Path Disclosure source: https://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional...
waraxe-2004-SA006.txt
================================================================================ waraxe-2004-SA006 ================================================================================ Multiple vulnerabilities in 4nalbum module for PhpNuke...
[waraxe-2004-SA#006 - Multiple vulnerabilities in 4nalbum module for PhpNuke]
================================================================================ waraxe-2004-SA006 ================================================================================ Multiple vulnerabilities in 4nalbum module for PhpNuke...
Invision Power Board (IP.Board) 1.3 - SQL Injection
Invision Power Board IP.Board 1.3 - SQL Injection IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: = 1.3 Website: http://www.invisionboard.com/ BID: 9810 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up wi...
Invision Power Board (IP.Board) < 1.3 - SQL Injection
IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: = 1.3 Website: http://www.invisionboard.com/ BID: 9810 Description: Invision Power Board IPB is a professional forum system that has been built from the ground up with speed and security in mind, taking advantage of...
LAN SUITE Web Mail 602Pro Multiple Vulnerabilities
Application: LAN SUITE Web Mail Server: WEB602/1.04 Vendors: Software602, Inc http://www.software602.com Versions: 602Pro Platforms: Windows Bug: Directory Listing, Local Path Disclosure and Cross Site Scripting Risk: Medium Exploitation: Remote with browser Date: 28 Feb 2004 Author: Rafel Ivgi,...
TalentSoft Web+ webplus.exe Path Disclosure
The remote host appears to be running Web+ Application Server. The version of Web+ installed on the remote host reveals the physical path of the application when it receives a script file error. %NASLMINLEVEL 70300 This script was written by David Kyger See the Nessus Scripts License for details...
Working Resources BadBlue Server 2.40 - PHPtest.php Full Path Disclosure
Working Resources BadBlue Server 2.40 - PHPtest.php Full Path Disclosure source: https://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a...
Working Resources BadBlue Server 2.40 - 'PHPtest.php' Full Path Disclosure
source: https://www.securityfocus.com/bid/9737/info It has been reported that BadBlue Server may be prone to a remote path disclosure vulnerability that may allow an attacker to disclose the installation path by issuing a request for 'phptest.php' script. BadBlue version 2.4 has been reported to ...
CVE-2004-0066
phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to 1 indilist.php, 2 famlist.php, 3 placelist.php, 4 imageview.php, 5 timeline.php, 6 clippings.php, 7 login.php, and 8 gdbi.php...
NetWare-Enterprise-Web-Server/5.1/6.0 Multiple Vulnerabilities
Software: Novell Netware Vendor: http://www.Novell.com Versions: NetWare-Enterprise-Web-Server/5.1/6.0 Platforms: Windows Bug: Multiple Vulnerabilities Risk: Medium Exploitation: Remote with browser Date: 6 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...
novellNetware.txt
Software: Novell Netware Vendor: http://www.Novell.com Versions: NetWare-Enterprise-Web-Server/5.1/6.0 Platforms: Windows Bug: Multiple Vulnerabilities Risk: Medium Exploitation: Remote with browser Date: 6 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...
WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure
WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This...
WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure
source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This information may permit an attacker to enumerate the layout of the underlying...
CVE-2004-0066
phpGedView is affected by CVE-2004-0066 up to version 2.64. The vulnerability allows remote attackers to disclose the web server’s absolute path via malformed parameters to multiple PHP pages (indilist.php, famlist.php, placelist.php, imageview.php, timeline.php, clippings.php, login.php, gdbi.ph...
CVE-2004-0066: Undefined Security Weakness
phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to 1 indilist.php, 2 famlist.php, 3 placelist.php, 4 imageview.php, 5 timeline.php, 6 clippings.php, 7 login.php, and 8 gdbi.php...
CVE-2003-1526
PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as 1 ", 2 ', or 3 in the search field, which reveals the path in an error message...
QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users
Indonesia Security Development Team Advisory QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users ===================================================================== Advisory Name: QuikStore Shopping Cart Discloses Installation Path & Files to Remote Users Release Date:...
SGDynamo sgdynamo.exe HTNAME Parameter Path Disclosure
The CGI 'sgdynamo.exe' can be tricked into giving the physical path to the remote web root. This information may be useful to an attacker who can use it to launch more effective attacks against the remote server. %NASLMINLEVEL 70300 This script written by Scott Shebby 12/2003 See the Nessus Scrip...
Aardvark Topsites 4.1.0 Vulnerabilities
Vendor : Aardvarkind URL : http://www.aardvarkind.com Version : Aardvark Topsites PHP 4.1.0 Risk : Multiple Vulnerabilities Description: Aardvark Topsites is a popular free PHP topsites script. See URL for details. Plaintext Database Pass Weakness: The login info for the database being used by...