CVE-2005-1595

CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2005-1595

CodeThat ShoppingCart 1.3.1 is affected by remote vulnerabilities described across connected sources. The OpenVAS NASL entry documents input validation flaws in the remote CodeThat ShoppingCart that allow SQL injection via the id parameter of catalog.php, enabling unauthenticated remote exploitat...

CVE-2005-1586

Quick.Forum 2.1.6 stores potentially sensitive information such as usernames, banned IP addresses, censored words, and backups under the web document root, which allows remote attackers to obtain that information via a direct request to 1 db/users.txt, 2 db/banList.txt, 3 db/censureWords.txt, or ...

CVE-2004-1786

PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb...

CVE-2004-1786

CVE-2004-1786 affects PortalApp and stems from insufficient access control that places user credentials under the web root. The vulnerability enables remote attackers to access sensitive information by directly requesting 8275.mdb. Connected sources confirm this exposure but do not document a pat...

Easy Message Board - Directory Traversal

source: https://www.securityfocus.com/bid/13551/info Easy Message Board is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://www.example/com/cgi-bin/emsgb/easymsgb.pl?print=../../../../../../../../etc/passwd...

simplecam 1.2 - Directory Traversal

simplecam 1.2 - Directory Traversal source: https://www.securityfocus.com/bid/13495/info SimpleCam is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://example.com/........................\windows\system.ini...

CVE-2005-1426

Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb aka mdb-database/blog.msb...

CVE-2005-1427

Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb...

CVE-2005-1427

Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb...

CVE-2005-1425

Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/guestbook.mdb...

CVE-2005-1426

Affected software: Ublog Reload (Uapplication Ublog Reload). Vulnerable component: mdb-database/blog.mdb (aka blog.msb) exposed under the web root. Root cause: insufficient access control in the web root enables direct HTTP retrieval of the database by remote attackers. Impact: potential unauthor...

CVE-2005-1425

CVE-2005-1425 affects Uguestbook 1.0, where sensitive data is stored under the web root with insufficient access control. Remote attackers can directly request mdb-database/guestbook.mdb to download the database. CVSS v2 base score is 5.0 (Medium) with network attack, low complexity, no authentic...

CVE-1999-1374

perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request...

CVE-2005-0459

phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to selectlang.lib.php, which reveals the path in a PHP error message...

CVE-2005-0853

betaparticle blog bp blog stores the database under the web root, which allows remote attackers to obtain sensitive information via a direct request to 1 dbBlogMX.mdb for versions before 3.0, or 2 Blog.mdb for versions 3.0 and later. NOTE: it was later reported that vector 2 also affects versions...

CVE-2005-1022

ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information...

DEBIAN-CVE-2005-0459

phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to selectlang.lib.php, which reveals the path in a PHP error message...

CVE-2005-0459

phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to selectlang.lib.php, which reveals the path in a PHP error message...

video cam server 1.0 - Directory Traversal

video cam server 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/13456/info Video Cam Server is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. http://www.example.com/......................\windows\system.ini...