PT-2024-13898 · Ibm · Ibm Cics Transaction Gateway For Multiplatforms

Name of the Vulnerable Software and Affected Versions: IBM CICS Transaction Gateway for Multiplatforms versions 9.2 through 9.3 Description: The issue could disclose sensitive path information to an attacker through debugging or error messages. It also involves the transmission or storage of...

DBHcms Information Disclosure Vulnerability

DBHcms is a small, free and open source content management system for personal and small business websites. An information disclosure vulnerability exists in DBHcms 1.2.0. The vulnerability stems from /dbhcms/ext/news/ext.news.be.php has security access control. A remote unauthenticated attacker...

Wordpress Twentyfourteen Theme Path Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Twentyfourteen is a default theme for WordPress. A path information disclosure vulnerability exists in the Wordpress...

Apache AXIS 1.0 - Non-Existent WSDL Path Information Disclosure

Apache AXIS 1.0 - Non-Existent WSDL Path Information Disclosure source: https://www.securityfocus.com/bid/23687/info Apache AXIS is prone to a path-information-disclosure vulnerability. Remote unauthorized attackers may be able to determine webserver directory paths. Information obtained may aid...

CVE-2007-2253

CVE-2007-2253 affects Exponent CMS 0.96.6 Alpha and earlier. The vulnerability is a path disclosure where remote attackers can obtain path information by directly requesting (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php. The connected documents provide these concrete affected...

CVE-2002-1717

Microsoft Internet Information Services (IIS) 5.1 is affected by CVE-2002-1717, allowing remote attackers to view installation path information via GET requests to /_vti_pvt/access.cnf, /_vti_pvt/botinfs.cnf, /_vti_pvt/bots.cnf, or /_vti_pvt/linkinfo.cnf. OpenVAS/Nessus references confirm this .c...

Re: VP-ASP shopping cart software.

Hi, A small thing the original advisory author has not mentioned is that SQL injection is also possible allowing you to enter the administrative page with actually knowing the used administrator username and password, example: Username: 'or''=' i.e. enter just: 'or''=' Password: 'or''=' i.e. ente...