Design/Logic Flaw

WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the default URI, which reveals the full path and the SQL database structure...

How to find WEB application vulnerabilities and how to exploit and prevention-vulnerability and early warning-the black bar safety net

The article had intended to send to magazines, because I'm too lazy to write, write it again it sent to their own BLOG. Internetthe security is a very popular topic, whether it is this expert or an ordinary person, are more or less involved therein. In this environment, the intrusion also become...

SilverStream database structure

It is possible to download the remote SilverStream database structure by requesting : http://www.example.com/SilverStream/Meta/Tables/?access-mode=text An attacker may use this flaw to gain more knowledge about this host. Reference : http://online.securityfocus.com/archive/101/144786 OpenVAS...

[Advisory] Powerslave 4.3 Information Leak Vuln.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================= H Zero Seven Security Advisory Product : FlyingDog Software - Powerslave Portalmanager Impact : information leak vulnerability Issue date: 19 Sept. 2003 Update : Powerslave 4.4.3pl3 Affected :...

Flying Dog Software Powerslave 4.3 Portalmanager - sql_id Information Disclosure

Flying Dog Software Powerslave 4.3 Portalmanager - sqlid Information Disclosure source: https://www.securityfocus.com/bid/8659/info It has been reported that Powerslave Portalmanager is prone to an information disclosure issue that may allow remote attackers to gain access to sensitive informatio...

Flying Dog Software Powerslave 4.3 Portalmanager - 'sql_id' Information Disclosure

source: https://www.securityfocus.com/bid/8659/info It has been reported that Powerslave Portalmanager is prone to an information disclosure issue that may allow remote attackers to gain access to sensitive information about the underlying database structure. The problem is reported to exist in t...

SilverStream Database Structure Disclosure

An unauthenticated, remote attacker can discover the internal structure of the remote SilverStream database by sending a special request. %NASLMINLEVEL 70300 This script was written by Tor Houghton, but I looked at "htdig" by Renaud Deraison Changes by rd: - phrasing in the report - pattern read...