CVE-2008-7268

The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to phpinfo in misc.php...

Information disclosure

The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to phpinfo in misc.php...

CVE-2008-7268

SiteEngine 5.x is affected by CVE-2008-7268 via a phpinfo information-disclosure in misc.php when action=php_info is supplied, allowing remote attackers to obtain system information. The connected documents reiterate the description; no remediation patch/version is provided in the supplied source...

broadcast-upnp-info NSE Script

Attempts to extract system information from the UPnP service by sending a multicast query, then collecting, parsing, and displaying all responses. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline,...

Exponent CMS v0.97 Multiple Vulnerabilities

Summary Open Source Content Management System PHP+MySQL. Description Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure Vulnerability 2. Arbitrary File Upload / File Modify Vulnerability 3. Reflected Cross-Site Scripting Vulnerability 1 LFI/FD occurs whe...

PostgreSQL SQL Injection

SQL-Injection в PostgreSQL ::Ошибки:: Итак, мы подставили в параметр кавычку, и что мы видим? Вот типичные ошибки, с которыми мы будем работать: Код: Warning: pgquery: Query failed: ERROR: syntax error at or near "" at character... Warning: pgexec function.pg-exec: Query failed: ERROR: syntax...

Joomla! < 1.5.16 Multiple Vulnerabilities (deprecated)

Binary data 5518.prm...

Debian DSA-1979-1 : lintian - multiple vulnerabilities

Multiple vulnerabilities have been discovered in lintian, a Debian package checker. The following Common Vulnerabilities and Exposures project ids have been assigned to identify them : - CVE-2009-4013: missing control files sanitation Control field names and values were not sanitised before using...

DSA-1979-1 lintian - multiple vulnerabilities

Bulletin has no description...

MyFusion 6b - settings[locale] Local File Inclusion

MyFusion 6b - settingslocale Local File Inclusion ???????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ?????...

Tribiq CMS 5.0.12c (XSS/LFI) Multiple Remote Vulnerabilities

No description provided by source. ┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C ...

Tribiq CMS 5.0.12c - Cross-Site Scripting / Local File Inclusion

???????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable...

phpCollegeExchange 0.1.5c (RFI/LFI/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ phpCollegeExchange 0.1.5c RFI/LFI/XSS Multiple Vulnerabilities ================================================================...

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

???????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable...

CVE-2008-6771

YourPlace 1.0.2 and earlier allows remote attackers to obtain sensitive system information via a direct request via a direct request to user/uploads/phpinfo.php, which calls the phpinfo function...

CVE-2008-6771

CVE-2008-6771 affects YourPlace 1.0.2 and earlier, where a direct request to user/uploads/phpinfo.php invokes phpinfo and exposes sensitive system information. The document set confirms the affected product/version and the underlying cause (calling phpinfo). No explicit remediation is documented ...

memcached -- memcached stats maps Information Disclosure Weakness

Secunia reports: A weakness has been reported in memcached, which can be exploited by malicious people to disclose system information. The weakness is caused due to the application disclosing the content of /proc/self/maps if a stats maps command is received. This can be exploited to disclose e.g...

Update Protection against IBM Access Support ActiveX GetXMLValue Method Buffer Overflow

IBM Access Support ActiveX Control contains a buffer overflow vulnerability. The IBM Access Support ActiveX control is used by the vendor to collect system information, such as make, model, serial number, OS version, etc. This control is available on the IBM / Lenovo web site, and may also come...

CVE-2008-6159

Content Management Made Easy CMME 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function...

CVE-2008-6159

Content Management Made Easy (CMME) 1.19 is affected by an information disclosure vulnerability where a direct request to info.php invokes phpinfo, allowing remote attackers to obtain system information. The flaw is triggered by accessing the info.php entry point, and the underlying cause is the ...