EUVD-2011-3664

Malware in sbrugna...

CVE-2011-3705

Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by acp/includes/edit.inc.php and certain other files...

CVE-2011-3705

Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by acp/includes/edit.inc.php and certain other files...

Information disclosure

Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by acp/includes/edit.inc.php and certain other files...

CVE-2011-3705

CVE-2011-3705 affects Arctic Fox CMS 0.9.4. Affected component is PHP files (notably acp/includes/edit.inc.php and similar) where a direct request to a PHP file can cause an error message that reveals the installation path, enabling information disclosure. The abuse is a remote attack that does n...

CVE-2011-3705

Arctic Fox CMS 0.9.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by acp/includes/edit.inc.php and certain other files...

HTB22833: Information Disclosure in Arctic Fox CMS

Vulnerability ID: HTB22833 Reference: http://www.htbridge.ch/advisory/informationdisclosureinarcticfoxcms.html Product: Arctic Fox CMS Vendor: Michael Armbruster http://sourceforge.net/projects/arcticfox/ Vulnerable Version: 0.9.4 and probably prior versions Vendor Notification: 01 February 2011...

Arctic Fox CMS 0.9.4 Information Disclosure

Vulnerability ID: HTB22833 Reference: http://www.htbridge.ch/advisory/informationdisclosureinarcticfoxcms.html Product: Arctic Fox CMS Vendor: Michael Armbruster http://sourceforge.net/projects/arcticfox/ Vulnerable Version: 0.9.4 and probably prior versions Vendor Notification: 01 February 2011...

Information Disclosure Vulnerability in Arctic Fox CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Arctic Fox CMS which could be exploited to disclose potentially sensitive information. 1 Information disclosure vulnerability in Arctic Fox CMS The vulnerability exists due to insufficient handling of error messages in th...