322 matches found
Fedora 10 : prelude-manager-0.9.14.2-2.fc10 (2009-3931)
The configuration file of prelude-manager contains a database password and is world readable. This update restricts permissions to the root account. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...
Fedora 9 : prewikka-0.9.14-2.fc9 (2009-3789)
The permissions on the prewikka.conf file are world readable and contain the sql database password used by prewikka. This update makes it readable just by the apache group. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
CVE-2008-6008
hyBook Guestbook Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for hyBook.mdb...
CVE-2008-5328
The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object...
Design/Logic Flaw
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the obje...
CVE-2008-5327
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the obje...
Design/Logic Flaw
The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object...
CVE-2008-5328
The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object...
CVE-2008-5327
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the obje...
Debian Security Advisory DSA 1501-1 (dspam)
The remote host is missing an update to dspam announced via advisory DSA 1501-1. OpenVAS Vulnerability Test $Id: deb15011.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1501-1 dspam Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1501-1 : dspam - programming error
Tobias Grutzmacher discovered that a Debian-provided CRON script in dspam, a statistical spam filter, included a database password on the command line. This allowed a local attacker to read the contents of the dspam database, such as emails. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...
Default credentials
Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...
CVE-2007-5172
Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...
CVE-2007-5172
Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...
Very classic webshell to mention the right-vulnerability warning-the black bar safety net
Said to have spent nine cattle II Tiger of effort to get a webshell, the Of course, also want to continue to receive full server admin rights, as don't want to give the admin The not a good hacker to HEE HEE to better come with me, see what you can use to elevate privileges The first If the serve...
CVE-2004-2268
PimenGest2 before 1.1.1 is affected: remote attackers can obtain the database password via debug information in rowLatex.inc.php. Root cause is leakage of sensitive credentials through debug data. Impact is partial confidentiality loss of the database credentials. No exploit details or specific m...
CVE-2004-2268
PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug information in rowLatex.inc.php...
whoiscartInsert.txt
Subject: Saeven.net's WhoisCart all versions released prior to this disclosure is vulnerable in that it allows an attacker to insert Javascript into user viewed pages, and also to view any world readable file on the server hosting the WhoisCart software. Severity: Severe; These vulnerabilities ca...
