prozilla-sql.txt

--==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

CVE-2006-3370

Blueboy 1.0.3 stores bbnewsconfig.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...

CVE-2006-3371

Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...

CVE-2006-3367

Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, allowing remote attackers to obtain sensitive information including the database configuration. This CVE (CVE-2006-3367) is documented across multiple sources (NVD/NVD CVE list) a...

CVE-2006-3370

Blueboy 1.0.3 stores bbnewsconfig.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...

CVE-2006-3370

Blueboy 1.0.3 stores bb_news_config.inc under the web document root with insufficient access control, enabling remote attackers to read sensitive information including the database configuration. Affected software: Blueboy 1.0.3. Root cause: inadequate access control on web-root files exposing bb...

CVE-2006-3371

The CVE-2006-3371 entry concerns Eupla Foros 1.0, where inc/config.inc is stored under the web document root due to insufficient access control. This could let remote attackers obtain sensitive information, including database configuration. Connected records confirm the affected product and the r...

CVE-2006-3367: Undefined Security Weakness

Mp3 JudeBox Server Mp3NetBox Beta 1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...

CVE-2006-3370: Undefined Security Weakness

Blueboy 1.0.3 stores bbnewsconfig.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...

CVE-2006-3371: Undefined Security Weakness

Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...

CVE-2006-1211

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions. NOTE: IBM has private...

CVE-2005-3979

relocateserver.php in Coppermine Photo Gallery CPG 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request...

runcms highlight.php hole

This is a stupid BUG report. They found the bug without checking the script or they know but dont said about it to promote their group. The truth is the script is allow only user that have the right to access the "systems" module to use it, this mean only admin and some moderators/users that have...

CVE-2005-0828

highlight.php in 1 RUNCMS 1.1A, 2 CIAMOS 0.9.2 RC1, 3 e-Xoops 1.05 Rev3, and possibly other products based on e-Xoops exoops, allows remote attackers to read arbitrary PHP files by specifying the pathname in the file parameter, as demonstrated by reading database configuration information from...

highlight.txt

IHS Iran Hackers Sabotage Public advisory by : NT [email protected] If You Have RUNCMS Installation Address You Can Use highligh.php Hole And Get DataBase ConfigurationName,User,Password Tested In RUNCMS 1.1A ------------------------------------------- Input This Line To Your Browser AddressBar :...

Ciamos Highlight.php Security Hole(IHS)

IHS Iran Hackers Sabotage Public advisory by : NT [email protected] If You Have CIAMOS Installation Address You Can Use highligh.php Hole And Get DataBase ConfigurationName,User,Password Tested In CIAMOS ------------------------------------------- Input This Line To Your Browser AddressBar :...

runcms highlight.php hole

IHS Iran Hackers Sabotage Public advisory by : NT [email protected] If You Have RUNCMS Installation Address You Can Use highligh.php Hole And Get DataBase ConfigurationName,User,Password Tested In RUNCMS 1.1A ------------------------------------------- Input This Line To Your Browser AddressBar :...

RunCMS 1.1 - Database Configuration Information Disclosure

RunCMS 1.1 - Database Configuration Information Disclosure source: https://www.securityfocus.com/bid/12848/info RunCMS is reportedly affected by an information disclosure vulnerability. This issue is due to a failure in the application to secure sensitive information. Exploitation of this...

RunCMS 1.1 - Database Configuration Information Disclosure

source: https://www.securityfocus.com/bid/12848/info RunCMS is reportedly affected by an information disclosure vulnerability. This issue is due to a failure in the application to secure sensitive information. Exploitation of this vulnerability could lead to the disclosure of database configurati...

PeopleSoft <LONGCHAR >and <VARCHAR> Data Upload

Vendor: PeopleSoft Solution ID: 200749181 Product: People Tools Version: 8.42, Others? Platform: Solaris 8, BEA WebLogic, Others? Remote/Local: Remote, Authenticated Title: Character Field Length Impact: Possible denial of service. Description: LONGCHAR and VARCHAR fields allow potentially large...