CVE-2014-4031

CVE-2014-4031 affects Aruba Networks ClearPass Policy Manager. Vulnerable versions include ClearPass 5.x, 6.0.x, 6.1.x up to 6.1.4.61696, 6.2.x up to 6.2.6.62196, and 6.3.x before 6.3.4. The issue allows remote authenticated users to obtain database credentials via unspecified vectors. Exploitati...

CVE-2014-4031: Exposure of Sensitive Information to an Unauthorized Actor

The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to obtain database credentials via unspecified vectors...

PT-2014-5683

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions 5.x through 6.1.4.61696 Aruba Networks ClearPass versions 6.2.x through 6.2.6.62196 Aruba Networks ClearPass versions 6.3.x before 6.3.4 Description The issue allows remote authenticated users to obtain databa...

Design/Logic Flaw

RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document...

CVE-2014-0894

Summary: CVE-2014-0894 affects IBM Algo Credit Limits (RICOS ACLM) versions 4.5.0–4.7.0. Affects ACLM Web GUI; root cause is disclosure of database credentials (DbUser/DbPass) in clear text within an XML document read by the GUI, enabling an attacker to connect to the backend database and manipul...

CVE-2014-0894

RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document...

PT-2014-3927

Name of the Vulnerable Software and Affected Versions IBM Algo Credit Limits ACLM versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5 Description The issue allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document. Recommendations...

Oracle Demantra 12.2.1 - Database Credentials Disclosure

No description provided by source...

NC GBook 1.0 - Remote Command injection Exploit

No description provided by source. -------------------------------------------------------------- NC GBook 1.0 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-gaestebuch.com Thank You Very Much His0k4...

PHP-Nuke NSN Script Depository 1.0.0 - Remote Source Disclosure Vuln

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...

CA ERwin Web Portal ConfigServiceProvider Information Disclosure (CVE-2014-2210)

An information disclosure vulnerability exists in CA ERwin Web Portal. Upon executing a successful attack, the server will give access to XML files which normally should not be accessible to external users. This vulnerability is due to lack of authentication and insufficient input validation in t...

CVE-2014-0199

The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports rhevm-reports package before 3.3.3, stores the reports database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file...

CVE-2014-3848

The iMember360 plugin before 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to obtain database credentials via the i4wdbinfo parameter...

Design/Logic Flaw

The iMember360 plugin before 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to obtain database credentials via the i4wdbinfo parameter...

CVE-2014-3848

CVE-2014-3848 affects the WordPress plugin iMember360 before version 3.9.001. The root cause is improper access restrictions that allow remote attackers to obtain database credentials through the i4w_dbinfo parameter. Reported impact is disclosure of database credentials; no exploitation details ...

WordPress iMember360 Plugin <= 3.9.001 - Disclosure of Database Credentials

Because of this vulnerability, the attackers can obtain database credentials via the "i4wdbinfo" parameter. Solution Update the plugin...

CVE-2014-3848: Undefined Security Weakness

The iMember360 plugin before 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to obtain database credentials via the i4wdbinfo parameter...

PT-2014-5549

Name of the Vulnerable Software and Affected Versions iMember360 plugin versions prior to 3.9.001 Description The issue allows remote attackers to obtain database credentials due to improper access restriction. This can be achieved via the i4w dbinfo parameter. Recommendations For versions prior ...

Wordpress iMember360 Plugin 3.8.012 - 3.9.001 - Multiple Vulnerabilities

Exploit for php platform in category web applications ------------ BACKGROUND ------------ "iMember360is a WordPress plugin that will turn a normal WordPress site into a full featured membership site. It includes all the protection controls you can imagine, yet driven by Infusionsoft's...

PT-2014-4019

Name of the Vulnerable Software and Affected Versions Livetecs Timelive versions prior to 6.2.8 Description The issue allows remote attackers to change configurations and obtain the database connection string and credentials due to improper access restriction to systemsetting.aspx. Recommendation...