69 matches found
CVE-2018-1587
IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 could reveal technical error messages to allow an adversary to gain information about the application and database that could be...
CVE-2016-6272
creationtimestamp| type| source ---|---|--- 2018-02-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44098...
MyBB < 1.8.7 Multiple Vulnerabilities
MyBB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; ifdescription...
vBulletin 3.x <= 4.2.0 FAQ (Echo config) trick
By using this codes, you can echo config.php information, such as host, username and password. Go to acp, Faq Manager and then edit a FAQ, add the following code: $vbulletin-config'MasterServer''servername' $vbulletin-config'MasterServer''username' $vbulletin-config'MasterServer''password'...
Governo.it SQL Injection
============================================================== Governo.it SQL Injection Vulnerability We are: ------------------------------------------------------------ GodOfPain Lord TittiS SYSTEMOVERIDE ------------------------------------------------------------ Date: 28/12/2010...
Discuz!x官方 敏感信息泄露
简要描述: 由于官方项目的DEBUG缓存未清除,导致服务器大量信息泄漏。 当然一般其他网站只要未使用过DEBUG包的项目该问题不存在 详细说明: dbhost = 172.32.1.168 dbuser = superbase dbpw = Oh dbcharset = gbk pconnect = 0 dbname = superbase tablepre = pre 漏洞证明: http://www.discuz.net/data/debugadmin.php?I //phpinfo; http://www.discuz.net/data/debugadmin.php?C&c=...
CVE-2009-2956
The 1 Net.Commerce and 2 Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files...
osCommerce <= 2.2 (extras) Source Code Disclosure Vulnerability
No description provided by source. ---- osCommerce = 2.2 "extras/" information/source code disclosure ------------ software site: http://www.oscommerce.com/ if extras/ folder is placed inside the www path, you can see all files on target system, including php source code with database details, po...
osCommerce 2.2 - extras Source Code Disclosure
osCommerce 2.2 - extras Source Code Disclosure ---- osCommerce \n"; print nl2brhtmlentitiesimplode$readme, ' '; print "Continue\n"; print "\n"; exit; ... google search: inurl:"extras/update.php" intext:mysql.php -display...