338 matches found
minb-db.txt
Minb Is Not A Blog default password directory http://sourceforge.net/projects/minb Via looking in a default directory, any user can access the users.db file which contains the username and encrypted password of the person running the board. Try it for your self: www.example.com/minb/db/users.db T...
CVE-2007-2979
Techno Dreams Web Directory / Search Engine 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database.mdb...
CVE-2007-2979
Techno Dreams Web Directory / Search Engine 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database.mdb...
CVE-2007-2979
Techno Dreams Web Directory / Search Engine 2.0 is affected by an improper access control vulnerability: sensitive data stored under the web root (Database.mdb) can be downloaded via a direct request. This CVE entry is corroborated across NVD/related records; the root cause is insufficient access...
wdse20-db.txt
--/ INTRODUCTION -- Advisory : Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Web Directory / Search Engine v2.0 Impact : Remote Googledork : "Web Directory / Search Engine v2.0" ,...
Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulne
--/ INTRODUCTION -- Advisory : Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulnerability Release Date : 25 / 05 / 2007 Application : Web Directory / Search Engine v2.0 Impact : Remote Googledork : "Web Directory / Search Engine v2.0" ,...
The most easy to let ash dove through the Kappa file and the active Defense method-vulnerability warning-the black bar safety net
File Dove gray 2. 0 3 look at the Server. exe has been configured·is killed, the following to the file This simple come up with our “small pig TOOL”, just select one flower instructions, I'm here is to choose the last one, as the merits of the card Patong file! Simple. Tool download address:...
With ASP Trojan FTP and decompression-vulnerability warning-the black bar safety net
In broilers placed on the website,the most troublesome is probably the update and upload a lot of files, Terminal Services broad daylight easy to be found,open your own ftp and not assured. Your own online in a circle is found by combining the non-component upload asp Trojan can be easily achieve...
With ASP Trojan FTP and decompression-vulnerability warning-the black bar safety net
In broilers placed on the website,the most troublesome is probably the update and upload a lot of files, Terminal Services broad daylight easy to be found,open your own ftp and not assured. Your own online in a circle is found by combining the non-component upload asp Trojan can be easily achieve...
Network Security Series knowledge of CGI exploits collection under-vulnerability warning-the black bar safety net
4 2. exprcalc. cfm ● Type: the attack type ● The level of risk: low ● Description: if in a Web directory containing: | /cfdocs/expeval/exprcalc. cfm /cfdocs/expeval/sendmail. cfm /cfdocs/expeval/eval. cfm /cfdocs/expeval/openfile. cfm /cfdocs/expeval/displayopenedfile. cfm...
CVE-2006-6578
Microsoft Internet Information Services IIS 5.1 permits the IUSRMachine account to execute non-EXE files such as .COM files, which allows attackers to execute arbitrary commands via arguments to any .COM file that executes those arguments, as demonstrated using win.com when it is in a web directo...
Hot Links download backup authorized vulnerabilities (re-post with some edit)
Hot Links is web directory system provided by mrcgiguy.com contain PHP+MySQL version and Perl version and PHP withou MySQL. All version are vulnerabilities If admin backup database will store on server and attacker can download without authorized: http://domain.ext/path/dlback.php?dl=fullback for...
CVE-2006-5905
Web Directory Pro allows remote attackers to 1 backup the database and obtain the backup via a direct request to admin/backupdb.php or 2 modify configuration via a direct request to admin/options.php...
CVE-2006-5905
Web Directory Pro allows remote attackers to 1 backup the database and obtain the backup via a direct request to admin/backupdb.php or 2 modify configuration via a direct request to admin/options.php...
CVE-2006-5905
Web Directory Pro is affected by CVE-2006-5905. The vulnerability allows remote attackers to perform two unauthorized actions via direct requests to admin/backup_db.php and admin/options.php: (1) backup the database and obtain the backup file, and (2) modify configuration. The CVSS metrics indica...
Web Directory Pro bypass Vulnerabilities
Web Directory Pro is product of hostingfrenzy.com I check latest version and detect some security holes, attackers can backup database or re-config system: 1. Backup database: http://domain/path/admin/backupdb.php 2. Re-config system: http://domain/path/admin/options.php Note: If IE cannot downlo...
Microsoft IIS ASP Stack Overflow Exploit (MS06-034)
No description provided by source. include stdio.h include windows.h / Microsoft IIS ASP Stack Overflow ExploitMS06-034 by cocoruderfrankruderathotmail.com,2006/7/13 page:http://ruder.cdut.net/default.asp successfully test on Windows 2000 Server SP4+IIS5.0, On Windows 2003 Server+IIS6.0,because t...
Directory traversal
Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execute arbitrary code, possibly by uploading a file with multiple extensions into the WebLink directory...
xinnet. com China new network Web Mail system has a serious vulnerability-a vulnerability warning-the black bar safety net
Long time no Post garbage come up, this also is not prepared to contribute, to the octal friend. First good luck to all octal friends a Happy New Year. Everyone knows China's famous New cafe, new network virtual host in a stable and secure known. Business users very much, I also bought a new...
SQL injection with ASP Trojan upload another idea-vulnerability warning-the black bar safety net
Article author: absolute zero Information source: rohu.com This article for have sa permissions to the sqlserver database, and cansql injectionsupport fso+asp Server SQL injection, how to upload Trojans, has been relatively headache thing, I here upload Trojan a another method. 1, theSQL...