EUVD-2008-0489

Malware in sbrugna...

EUVD-2009-4977

Malware in sbrugna...

Web Wiz NewsPad Express Edition 1.03 Database File Disclosure Vulnerability

No description provided by source. ============================================================= NewsPad Database Download Vulnerability ============================================================= Exploit Title: NewsPad Database Download Vulnerability Date: 15/11/2010 Author: keracker Software...

CVE-2009-5019

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

CVE-2009-5019

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

CVE-2009-5019

The CVE-2009-5019 entry describes a vulnerability in Web Wiz NewsPad where sensitive data is stored under the web root with insufficient access control, enabling remote attackers to directly download the database (NewsPad.mdb). Affected component is the NewsPad web application; the root cause is ...

CVE-2009-5019: Undefined Security Weakness

Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/NewsPad.mdb...

PT-2010-1820

Name of the Vulnerable Software and Affected Versions Web Wiz NewsPad affected versions not specified Description The issue allows remote attackers to download a database due to insufficient access control. Sensitive information is stored under the web root, enabling attackers to access the...

Web Wiz NewsPad Express Edition 1.03 Database File Disclosure

Exploit for php platform in category web applications ============================================================= Web Wiz NewsPad Express Edition 1.03 Database File Disclosure ============================================================= Exploit Title: NewsPad Database Download Vulnerability...

web wiz newspad v1.03 Database Disclosure Exploit

Exploit for perl platform in category web applications ================================================= web wiz newspad v1.03 Database Disclosure Exploit ================================================= !/usr/bin/perl -w web wiz newspad v1.03 Database Disclosure Exploit Found & Coded: indoushka...

Web Wiz NewsPad Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : Some sites may change the...

Web Wiz NewsPad Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================= Web Wiz NewsPad Database Disclosure Vulnerability ================================================= ============================================================================== » Note :...

Web Wiz NewsPad Database Disclosure Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

Web Wiz NewsPad - Database Disclosure

Web Wiz NewsPad - Database Disclosure ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Web Wiz NewsPad - Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : Some sites may change the...

CVE-2008-0479

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter...

CVE-2008-0479

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter...

CVE-2008-0479

CVE-2008-0479 is a directory traversal vulnerability affecting Web Wiz NewsPad 1.02, specifically in RTE_file_browser.asp. The issue arises from improper handling of the sub parameter (via a pattern like .....\ in the sub parameter), enabling remote attackers to list arbitrary directories and acc...

CVE-2008-0479: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in RTEfilebrowser.asp in Web Wiz NewsPad 1.02 allows remote attackers to list arbitrary directories, and .txt and .zip files, via a .....\\ in the sub parameter...

CVE-2008-0466: Improper Authentication

Web Wiz RTEfilebrowser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require authentication, which allows remote attackers to list directories and read files. NOTE: this can be leveraged for listings outside the configured directory tree ...