iDB 0.2.5pa SVN 243 - skin Local File Inclusion

iDB 0.2.5pa SVN 243 - skin Local File Inclusion !/usr/bin/env LOTFREE 2009 - lotfree.next-touch.com Local require vulnerability in iDB a PHP/MySQL BBS Test on version 0.2.5 Pre-Alpha SVN 243 released March 30, 2009 No checks are made on var "skin" in inc/profilemain.php before saving it to databa...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-7.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-6.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

Fedora Update for pcmanx-gtk2 FEDORA-2008-11511

Check for the Version of pcmanx-gtk2 OpenVAS Vulnerability Test Fedora Update for pcmanx-gtk2 FEDORA-2008-11511 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-5.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

[SECURITY] Fedora 10 Update: pcmanx-gtk2-0.3.8-4.fc10

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

CVE-2008-5597

Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for db/cforum.mdb...

Improper access control

Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for db/cforum.mdb...

CVE-2008-5597

CVE-2008-5597 affects Cold BBS, where sensitive data is stored under the web root with insufficient access control. The vulnerability allows remote attackers to directly download the database file (db/cforum.mdb), exposing stored information. The available sources describe the issue and confirm t...

CVE-2008-5597

Cold BBS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for db/cforum.mdb...

Cold BBS - Remote Database Disclosure

Cold BBS - Remote Database Disclosure Database Disclosure Vulnerability script: Cold BBS download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7 www.site.com/path/db/cforum.mdb Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...

Cold BBS (cforum.mdb) Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== Cold BBS cforum.mdb Remote Database Disclosure Vulnerability ============================================================== Database Disclosure Vulnerability script: Cold BBS...

Cold BBS (cforum.mdb) Remote Database Disclosure Vulnerability

No description provided by source. Database Disclosure Vulnerability script: Cold BBS download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7 www.site.com/path/db/cforum.mdb Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...

Cold BBS - Remote Database Disclosure

Database Disclosure Vulnerability script: Cold BBS download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7 www.site.com/path/db/cforum.mdb Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...

coldbbs-disclose.txt

Database Disclosure Vulnerability script: Cold BBS download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7 www.site.com/path/db/cforum.mdb Author: ahmadbady my mail: [email protected]...

CVE-2008-4076

Cross-site scripting XSS vulnerability in 1 Tor World Tor Board 1.3 and earlier, 2 Topics BBS 1.11 and earlier, 3 Simple BBS 1.86 and earlier, and 4 Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than...

Cross site scripting

Cross-site scripting XSS vulnerability in 1 Tor World Tor Board 1.3 and earlier, 2 Topics BBS 1.11 and earlier, 3 Simple BBS 1.86 and earlier, and 4 Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than...

CVE-2008-4076

CVE-2008-4076 is an XSS vulnerability affecting multiple Tor World CGI-based products (Tor Board 1.3 and earlier; Topics BBS 1.11 and earlier; Simple BBS 1.86 and earlier; Interactive BBS 1.57 and earlier). Public sources describe an ability for remote attackers to inject arbitrary script/HTML in...

CVE-2008-4076

Cross-site scripting XSS vulnerability in 1 Tor World Tor Board 1.3 and earlier, 2 Topics BBS 1.11 and earlier, 3 Simple BBS 1.86 and earlier, and 4 Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than...

JVN#18616622 Multiple Tor World CGI scripts vulnerable to arbitrary script execution

Tor World provides CGI scripts for implementing search engines, message boards, and other tools. Multiple Tor World CGI scripts contain a vulnerability which may allow an attacker to inject an arbitrary script into the web page which is generated by the affected product. This vulnerability is...