PT-2009-6627 · Intervations · Intervations Navicopa Web Server

Name of the Vulnerable Software and Affected Versions: InterVations NaviCOPA Web Server versions 3.0.1.2 and earlier Description: The issue allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI. This can be demonstrated by accessing URIs...

Femitter HTTP Server 1.03 Remote Source Disclosure

Exploit for unknown platform in category remote exploits ================================================== Femitter HTTP Server 1.03 Remote Source Disclosure ================================================== Title: Femitter HTTP Server 1.03 Remote Source Disclosure CVE-ID: OSVDB-ID: Author: DrI...

Femitter HTTP Server 1.03 - Remote Source Disclosure

Femitter HTTP Server 1.03 - Remote Source Disclosure Femitter HTTP Server v1.03 Remote Source Disclosure Found By: DrIDE Tested On: Windows XPSP3 Download: www.acritum.com - Description - Acritum Femitter Web Server v1.03 is a Windows based HTTP server. This is the latest version of the applicati...

Mereo 1.8.0 File Disclosure

Mereo Web Server v1.8 Multiple Remote Source Code Disclosure Found By: DrIDE Tested On: Windows XPSP3 - Description - Mereo Web Server v1.8 is a Windows based HTTP server. This is the latest version of the application available. Mereo is vulnerable to remote arbitrary source code disclosure by th...

SuSE Update for mono-web SUSE-SA:2007:002

Check for the Version of mono-web OpenVAS Vulnerability Test $Id: gbsuse2007002.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for mono-web SUSE-SA:2007:002 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

FreeLyrics 1.0 File Disclosure

Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researche...

PHP-Nuke NSN Script Depository 1.0.0 Remote Source Disclosure Vuln

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

PHP-Nuke NSN Script Depository 1.0.0 Remote Source Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================== PHP-Nuke NSN Script Depository 1.0.0 Remote Source Disclosure Vuln ==================================================================...

PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Re: PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure

sorry, i've made a mistake! only the versions = 1.0.0 are veulnerable!...

PHP-Nuke NSN Script Depository 1.0.0 - Remote Source Disclosure

PHP-Nuke NSN Script Depository 1.0.0 - Remote Source Disclosure --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

PHP-Nuke NSN Script Depository 1.0.0 - Remote Source Disclosure

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- PHP-Nuke...

LiteSpeed Web Server <= 3.2.3 Remote Source Code Disclosure Vuln

No description provided by source. | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.||||...

CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...

Album Photo Sans Nom <= 1.6 Remote Source Disclosure Vulnerability

No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...

Album Photo Sans Nom 1.6 - Remote Source Disclosure

Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...

PHP 4.x5.x - Html_Entity_Decode() Information Disclosure

PHP 4.x5.x - HtmlEntityDecode Information Disclosure source: https://www.securityfocus.com/bid/17296/info PHP 'htmlentitydecode' function is prone to an information-disclosure vulnerability. This issue arises when a script using the function accepts data from a remote untrusted source and returns...

PHP 4.x/5.x - 'Html_Entity_Decode()' Information Disclosure

source: https://www.securityfocus.com/bid/17296/info PHP 'htmlentitydecode' function is prone to an information-disclosure vulnerability. This issue arises when a script using the function accepts data from a remote untrusted source and returns the function's result to an attacker. Information th...

CVE-2005-4147: Undefined Security Weakness

The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml TCL files via 1 a request with a trailing null byte %00, which might also require 2 an authentication bypass step that involves a username with a trailing "@" characters...

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun

Microsoft SQL Server 7.02000 JET Database Engine 4.0 - Buffer Overrun source: https://www.securityfocus.com/bid/7541/info Microsoft SQL Server is prone to an exploitable buffer overrun vulnerability via the Jet Database Engine. This can occur while the JET 4.0 OLE DB data provider is querying dat...