240 matches found
CVE-2006-3371
Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...
CVE-2006-3367
Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, allowing remote attackers to obtain sensitive information including the database configuration. This CVE (CVE-2006-3367) is documented across multiple sources (NVD/NVD CVE list) a...
CVE-2006-3370
Blueboy 1.0.3 stores bb_news_config.inc under the web document root with insufficient access control, enabling remote attackers to read sensitive information including the database configuration. Affected software: Blueboy 1.0.3. Root cause: inadequate access control on web-root files exposing bb...
CVE-2006-3370
Blueboy 1.0.3 stores bbnewsconfig.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...
CVE-2006-3371
The CVE-2006-3371 entry concerns Eupla Foros 1.0, where inc/config.inc is stored under the web document root due to insufficient access control. This could let remote attackers obtain sensitive information, including database configuration. Connected records confirm the affected product and the r...
CVE-2006-1211
IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions. NOTE: IBM has private...
CVE-2005-3979
relocateserver.php in Coppermine Photo Gallery CPG 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request...
runcms highlight.php hole
This is a stupid BUG report. They found the bug without checking the script or they know but dont said about it to promote their group. The truth is the script is allow only user that have the right to access the "systems" module to use it, this mean only admin and some moderators/users that have...
CVE-2005-0828
highlight.php in 1 RUNCMS 1.1A, 2 CIAMOS 0.9.2 RC1, 3 e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops exoops, allows remote attackers to read arbitrary PHP files by specifying the pathname in the file parameter, as demonstrated by reading database configuration information from...
highlight.txt
IHS Iran Hackers Sabotage Public advisory by : NT [email protected] If You Have RUNCMS Installation Address You Can Use highligh.php Hole And Get DataBase ConfigurationName,User,Password Tested In RUNCMS 1.1A ------------------------------------------- Input This Line To Your Browser AddressBar :...
Ciamos Highlight.php Security Hole(IHS)
IHS Iran Hackers Sabotage Public advisory by : NT [email protected] If You Have CIAMOS Installation Address You Can Use highligh.php Hole And Get DataBase ConfigurationName,User,Password Tested In CIAMOS ------------------------------------------- Input This Line To Your Browser AddressBar :...
runcms highlight.php hole
IHS Iran Hackers Sabotage Public advisory by : NT [email protected] If You Have RUNCMS Installation Address You Can Use highligh.php Hole And Get DataBase ConfigurationName,User,Password Tested In RUNCMS 1.1A ------------------------------------------- Input This Line To Your Browser AddressBar :...
RunCMS 1.1 - Database Configuration Information Disclosure
RunCMS 1.1 - Database Configuration Information Disclosure source: https://www.securityfocus.com/bid/12848/info RunCMS is reportedly affected by an information disclosure vulnerability. This issue is due to a failure in the application to secure sensitive information. Exploitation of this...
RunCMS 1.1 - Database Configuration Information Disclosure
source: https://www.securityfocus.com/bid/12848/info RunCMS is reportedly affected by an information disclosure vulnerability. This issue is due to a failure in the application to secure sensitive information. Exploitation of this vulnerability could lead to the disclosure of database configurati...
PeopleSoft <LONGCHAR >and <VARCHAR> Data Upload
Vendor: PeopleSoft Solution ID: 200749181 Product: People Tools Version: 8.42, Others? Platform: Solaris 8, BEA WebLogic, Others? Remote/Local: Remote, Authenticated Title: Character Field Length Impact: Possible denial of service. Description: LONGCHAR and VARCHAR fields allow potentially large...
PalmVNC 1.40 Insecure Records
Flurnet Security ---------------- Application: PalmVNC 1.40 Developers: Harkan Software http://www.harakan.btinternet.co.uk/PalmVNC/ Vladimir Minenko http://www.wind-networks.de/PalmVNC/ Scope: VNC passwords saved in plaintext with backup bit. Tested on: PalmVNC 1.40 older versions probably...
[SECURITY] [DSA 229-1] New IMP packages fix SQL injection
-------------------------------------------------------------------------- Debian Security Advisory DSA 229-1 [email protected] http://www.debian.org/security/ Martin Schulze January 15th, 2003 http://www.debian.org/security/faq -...
VP-ASP shopping cart software.
NOTE: Please Just ignore the tags, there just notes ect. to make a .txt document a little more readable, or not. short Several security issues in the VP-ASP shopping cart software dotPath Information Disclosure Vulnerability. dotInsecure perrmissions on configuration file. /short synopsis -Defaul...