[SA15362] ImageGallery system Exposure of User Credentials

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: ImageGallery system Exposure of User Credentials SECUN...

DEBIAN-CVE-2005-0869

phpSysInfo 2.3 allows remote attackers to obtain sensitive information via a direct request to 1 class.OpenBSD.inc.php, 2 class.NetBSD.inc.php, 3 class.FreeBSD.inc.php, 4 class.Darwin.inc.php, 5 XPath.class.php, 6 systemheader.php, or 7 systemfooter.php, which reveal the path in a PHP error messa...

DEBIAN-CVE-2005-0438

awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to obtain sensitive information by setting the debug parameter...

PT-2005-1620 · Phpwebsite · Phpwebsite

Name of the Vulnerable Software and Affected Versions: phpWebSite versions 0.10.0 and earlier Description: The issue allows remote attackers to obtain sensitive information via an invalid SEA search module parameter, which reveals the path in a PHP error message. Recommendations: For phpWebSite...

Sambar Cleartext Password Remote Disclosure

Binary data 1547.prm...

XML Request Possible userID / password Cleartext Remote Disclosure

Binary data 5214.prm...

12Planet Chat Server ClearText Password Remote Disclosure (deprecated)

Binary data 1543.prm...

Interchange 4.8.x5.0 - Remote Information Disclosure

Interchange 4.8.x5.0 - Remote Information Disclosure source: https://www.securityfocus.com/bid/10005/info It has been reported that Interchange may be prone to a remote information disclosure vulnerability allowing attackers to disclose contents of arbitrary variables via URI requests. This issue...

pMachine 1.02.x - lib Multiple Script Direct Request Full Path Disclosures

pMachine 1.02.x - lib Multiple Script Direct Request Full Path Disclosures source: https://www.securityfocus.com/bid/7980/info It has been reported that pMachine is prone to remote a patch disclosure vulnerability when accessing various scripts. When a request is made for a target PHP script,...

FileMaker Pro Client Request User Passwords Remote Disclosure

The remote host is running a FileMakerPro server. There is a flaw in the design of the FileMakerPro server which makes the database authentication occur on the client side. A remote attacker could exploit this flaw to gain access to databases by connecting to this port with a rogue client. C...

security flaw

Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148...

Oracle 9iAS globals.jsa Database Credential Remote Disclosure

In the default configuration of Oracle 9iAS, it is possible to make requests for the globals.jsa file for a given web application. These files should not be returned by the server as they often contain sensitive information such as database credentials. %NASLMINLEVEL 70300 This script was written...

SnapStream PVS 1.2 - Plaintext Password

source: https://www.securityfocus.com/bid/3101/info Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP interface. The Snapstream PVS web interface runs on port 8129. Th...