Concrete CMS: page_controls_menu_js can reveal collection version of page

By visiting the url /tools/required/pagecontrolsmenujs?cID=&cvID= Where cID = page cID and cvID is unknown, If for cvID you start at 1 and the currently approved version is not the first version the code $function ccmAlert.hud'This page is pending approval.', 5000; ; is added to the header. If th...

Oracle Forms and Reports Remote Code Execution

This module uses two vulnerabilities in Oracle Forms and Reports to get remote code execution on the host. The showenv url can be used to disclose information about a server. A second vulnerability that allows arbitrary reading and writing to the host filesystem can then be used to write a shell...

BASE 'base_qry_main.php' SQLi Vulnerability

BASE is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2010-2754

CVE-2010-2754 affects Mozilla Firefox 3.5.x before 3.5.11, Firefox 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6. It relates to the window.onerror path and may allow a remote attacker to obtain sensitive information about script parameters v...

SeaMonkey < 1.1.8 Multiple Vulnerabilities

Binary data 4366.prm...

FreeBSD : horde -- 'url' disclosure of sensitive information vulnerability (c7c09579-b466-11da-82d0-0050bf27ba24)

Secunia advisory SA19246 : Paul Craig has discovered a vulnerability in Horde, which can be exploited by malicious people to disclose sensitive information. Input passed to the 'url' parameter in 'services/go.php' isn't properly verified, before it is used in a 'readfile' call. This can be...

WebSite Pro Malformed URL Path Disclosure

It was possible to discover the physical location of a virtual web directory of this host by issuing the command : GET /HTTP1.0/ This can reveal valuable information to an attacker, allowing them to focus their attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...