Pagode 0.5.8 (navigator_ok.php asolute) Remote File Disclosure Vuln

No description provided by source. Pagode 0.5.8navigatorok.php asoluteRemote File Disclosure D.Script:http://belnet.dl.sourceforge.net/sourceforge/pagode/pagode-0.5.8.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc V.Code In /navigator/navigatorok.php:...

Microsoft Windows ReadDirectoryChangesW information leak

ReadDirectoryChangesW API function doesn't check user's privileges for subtree folders, making it's possible for unprivileged user to gather information about sensitive files...

Ezboo webstats acces to sensitive files

Ezboo webstats acces to sensitive files By : sn0oPy Risk : medium site : http://www.ezboo.com/softs exploit : juste add this files to the url : http://www.target.ma/ezwebstats/update.php http://www.target.ma/ezwebstats/config.php Dork : inurl:"/ezWebStats/" intitle:"ezBOO WebStats" contact :...

ezboo-bad.txt

Ezboo webstats acces to sensitive files By : sn0oPy Risk : medium site : http://www.ezboo.com/softs exploit : juste add this files to the url : http://www.target.ma/ezwebstats/update.php http://www.target.ma/ezwebstats/config.php Dork : inurl:"/ezWebStats/" intitle:"ezBOO WebStats" contact :...

nabopoll 1.2 Remote Unprotected Admin Section Vulnerability

Exploit for unknown platform in category web applications =========================================================== nabopoll 1.2 Remote Unprotected Admin Section Vulnerability =========================================================== nabopoll 1.1.2 sensitive file admin without password By :...

CVE-2007-0620

download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php...

arsdigita-traverse.txt

SUMMARY ======= A directory traversal vulnerability exists in the Ars Digita Community System. A remote attacker could exploit this vulnerability to read arbitrary files with the permissions of the web server. AFFECTED SOFTWARE ================= Ars Digita Community System ACS 3.4.9, 3.4.10, and...

Directory traversal

download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathname in the file parameter, as demonstrated by config/gallerysetup.php. NOTE: this issue might be resultant from a directory traversal vulnerability...

Php/Mysql Site Builder 0.0.2 (htm2php.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Php/Mysql Site Builder 0.0.2 htm2php.php File Disclosure Vulnerability ======================================================================== PHPBuilder v0.0.2 Remo...

CGI Hack finishing-vulnerability warning-the black bar safety net

The General idea, skip the limit, view sensitive files and password-related files. Write the word cgi, into the background try pass webshell（background if the authentication or MD5 over time, you can try to cookies spoofing, local submit, and look for the executable in the directory and the...

Xerox WorkCentre Multiple Vulnerabilities

Binary data 3834.prm...

CVE-2006-5406

Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5406

Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3487

VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb...

CVE-2006-3487

Summary: CVE-2006-3487 affects VirtuaStore 2.0, where sensitive files are stored under the web root with insufficient access control. This allows remote attackers to obtain local database information by directly accessing the path database/virtuastore.mdb. Impact (as stated): Disclosure of local ...

CVE-2006-0232

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests...

CVE-2006-0232

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests...

CVE-2005-4772

The CVE-2005-4772 entry concerns liby2util in YaST on SUSE Linux prior to 20051007. The description states that liby2util preserves permissions and ownerships when copying a remote repository, which could allow local users to read or modify sensitive files. The connected SUSE CVE-2005-4772 page c...

4Images <= 1.7.1 Directory Traversal Vulnerability

The remote web server is running 4Images which is prone to directory traversal attacks. SPDX-FileCopyrightText: 2006 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

phpDocumentor <= 1.3.0 RC4 Local And Remote File Inclusion Vulnerability

The remote web server contains a PHP script that is prone to file inclusion flaws. Description : phpDocumentor is a automatic documentation generator for PHP. The remote host appears to be running the web-interface of phpDocumentor. This version does not properly sanitize user input in the...