EUVD-2006-5206

Malware in sbrugna...

EUVD-2006-6237

Malware in sbrugna...

CVE-2006-6849

administration/index.php in Cahier de texte CDT 2.2 does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions...

CVE-2006-6849

administration/index.php in Cahier de texte CDT 2.2 does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions...

Cahier de texte 2.2 Bypass General Access Protection Exploit

No description provided by source. ? / Informations ============ Affected.scr..: Cahier de texte V2.2 last version Poc.ID........: 17061224 Type..........: Bypass general access restriction Risk.level....: High Conditions....: None Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/...

Cahier de texte 2.2 - Bypass General Access Protection

Cahier de texte 2.2 - Bypass General Access Protection 'Administrateur' header"Location: ../index.php"; ; else header"Location: ../index.php";? ... / if!isset$GET'host' || empty$GET'host' headers; if!isset$GET'wanted' $wanted = 'index.php'; $host = $GET'host'; $prox = $GET'prox'; $path =...

Cahier de texte 2.2 Bypass General Access Protection Exploit

Exploit for unknown platform in category web applications ============================================================ Cahier de texte 2.2 Bypass General Access Protection Exploit ============================================================ 'Administrateur' header"Location: ../index.php"; ; else...

CVE-2006-6253

Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...

CVE-2006-6253

Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...

CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...

CVE-2006-6253

CVE-2006-6253 concerns Cahier de texte 2.0, which reportedly stores sensitive information under the web root. The vulnerability description indicates insufficient access control may allow remote attackers to directly request administration/dump.sql and obtain all users’ passwords. The connected d...

CVE-2006-6254

CVE-2006-6254 affects Cahier de texte 2.0, specifically the file administration/telecharger.php. The vulnerability allows remote attackers to read unparsed file content by supplying a chemin parameter, with evidence of directory traversal used to retrieve sensitive data (e.g., MySQL credentials f...

CVE-2006-6253

Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...

CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...

15061124.txt

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/ Poc.link........

Cahier de texte 2.0 (Database Backup/Source Disclosure) Remote Exploit

No description provided by source. !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..:...

Cahier de texte V2.0 SQL Code Execution Exploit

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/ Poc.link........

Cahier de texte 2.0 - Database Backup Source Disclosure

Cahier de texte 2.0 - Database Backup Source Disclosure !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..:...

Cahier de texte 2.0 - Database Backup / Source Disclosure

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/ Poc.link........

Cahier de texte 2.0 (Database Backup/Source Disclosure) Remote Exploit

Exploit for unknown platform in category web applications ====================================================================== Cahier de texte 2.0 Database Backup/Source Disclosure Remote Exploit ====================================================================== !/usr/bin/perl INFORMATIONS...