CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

CVE-2008-5562

ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb...

Improper access control

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

CVE-2008-5560

PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for postcards.mdb...

CVE-2008-5562

ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb...

CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

CVE-2008-5562

CVE-2008-5562 : ASPPortal has insufficient access control that exposes the web root, allowing remote attackers to download the database file by requesting xportal.mdb directly. Public references indicate this is a straightforward local-file exposure rather than a remote-code execution flaw. The c...

CVE-2008-5560

CVE-2008-5560 : The PostEcards application stores sensitive information under the web root with insufficient access control, allowing remote attackers to download the database file postcards.mdb via a direct request. This represents a path traversal/poor access-control exposure enabling disclosur...

CVE-2008-5560

PostEcards stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for postcards.mdb...

PostEcards SQL Injection / Database Disclosure

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : PostEcards download : http://www.funscripts.net/oldcoldfusion/download.php?fname=postcards Exploits : --=SQL INJECTION=--...

Ocean12 Calendar Manager Gold Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 Calendar Manager Gold Version: 2.04 Vendor : http://ocean12tech.com/products/o12calgold Dork: Maintained with the Ocean12 Calendar Manager Gold v2.04 Author : PouyaServer ,...

dvbbs7. 0 and 8. 0 access backstage to get webshell-vulnerability warning-the black bar safety net

Create a new database file, named a. mdb Create a new text file, 命名为b.txt and write the word Trojan At the command line enter the command copy a. mdb/b+b. txt/b c. mdb Get the c. mdb is already inserted into the word Trojan in the database Then in the posting the place to upload attachments, the...

X10media Mp3 Search Engine 1.6 - Remote File Disclosure

THUNDER X10media Mp3 Search Engine v1.5.5 - 1.6 Remote File Disclosure Vulnerability Founded by : THUNDER Dork: "This search engine is in no way intended for illegal downloads. " File : Download.php =========================================================================================== to rea...

sHibby sHop <= 2.2 (SQL/Update) Multiple Remote Vulnerabilities

No description provided by source. Title: sHibby sHop v2.2 = Remote SQL/Update Multiple Vulnerability ================================================================ + Author : KnocKout + Special Thankz : Dr.Kacak + System 0VerfL0verZ...

shibby-sql.txt

Title: sHibby sHop v2.2 = Remote SQL/Update Multiple Vulnerability ================================================================ + Author : KnocKout + Special Thankz : Dr.Kacak + System 0VerfL0verZ ================================================================= Script : sHibby sHop Verz: 2.2...

sHibby sHop <= 2.2 (SQL/Update) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== sHibby sHop = 2.2 SQL/Update Multiple Remote Vulnerabilities =============================================================== + Author : KnocKout + Special Thankz : Dr.Kacak +...

shibby shop 2.2 - Multiple Vulnerabilities

Title: sHibby sHop v2.2 = Remote SQL/Update Multiple Vulnerability ================================================================ + Author : KnocKout + Special Thankz : Dr.Kacak + System 0VerfL0verZ ================================================================= Script : sHibby sHop Verz: 2.2...

shibby shop 2.2 - Multiple Vulnerabilities

shibby shop 2.2 - Multiple Vulnerabilities Title: sHibby sHop v2.2 = Remote SQL/Update Multiple Vulnerability ================================================================ + Author : KnocKout + Special Thankz : Dr.Kacak + System 0VerfL0verZ...

VulnCheck KEV: CVE-2007-6026

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 aka Microsoft Jet Engine, as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column...

Stack overflow

Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 aka Microsoft Jet Engine, as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to execute arbitrary code via a crafted MDB file database file containing a column structure with a modified column count...