CVE-2008-6960

download.php in X10media x10 Automatic Mp3 Search Engine Script 1.5.5 through 1.6 allows remote attackers to read arbitrary files via an encoded url parameter, as demonstrated by obtaining database credentials from includes/constants.php...

DSA-1856-1 mantis - information leak

Bulletin has no description...

MODx config.js.php Information Disclosure

The remote web server is running MODx, an open source content management system. The version of MODx installed on the remote host fails to limit access to the 'core/model/modx/processors/system/config.js.php' script before returning the application's configuration settings, including database...

TikiWiki tiki-graph_formula Remote PHP Code Execution

TikiWiki 'TikiWiki tiki-graphformula Remote PHP Code Execution', 'Description' = %q TikiWiki 'Matteo Cantoni ', 'jduck' , 'License' = MSFLICENSE, 'References' = 'CVE', '2007-5423', 'OSVDB', '40478', 'BID', '26006', , 'Privileged' = false, 'Payload' = 'DisableNops' = true, 6k. Really...

CVE-2008-6869

Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for config/oramon.ini...

CVE-2008-6869

Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for config/oramon.ini...

Design/Logic Flaw

TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentials by reading this file...

CVE-2009-2358

TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentials by reading this file...

CVE-2009-2358

TekRADIUS 3.0 uses BUILTIN\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentials by reading this file...

DEBIAN-CVE-2008-6756

ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file...

CVE-2008-5956

Wbstreet aka PHPSTREET Webboard 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request to connect.inc...

Improper access control

Wbstreet aka PHPSTREET Webboard 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request to connect.inc...

CVE-2008-5956

Wbstreet aka PHPSTREET Webboard 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request to connect.inc...

CVE-2008-5956

CVE-2008-5956 affects Wbstreet (PHPSTREET Webboard) 1.0. The root cause is improper access control that leaves sensitive data under the web root, enabling remote attackers to retrieve database credentials by requesting connect.inc directly. Public references note that the issue has exploitable ch...

QuoteBook (poll.inc) Remote Config File Disclosure Vulnerability

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

BlogHelper (common_db.inc) Remote Config File Disclosure Vulnerability

No description provided by source. ...... Remote Config File Disclosure ---------------------------------------------------- script: BlogHelper download from:http://www.freedville.com/oss/BlogHelper.zip vul: www.site.com/path/commondb.inc ................................ $dbhost = ""; $dbusername...

CVE-2008-5853

Chilek Content Management System aka ChiCoMaS 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 obtain database credentials via a direct request for config.inc or 2 read database backups via a request for a backu...

Improper access control

Chilek Content Management System aka ChiCoMaS 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 obtain database credentials via a direct request for config.inc or 2 read database backups via a request for a backu...

CVE-2008-5853

Chilek Content Management System aka ChiCoMaS 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 obtain database credentials via a direct request for config.inc or 2 read database backups via a request for a backu...

CVE-2008-5853

CVE-2008-5853 affects Chilek Content Management System (ChiCoMaS) 2.0.4 and earlier. The vulnerability arises from storing sensitive information under the web root with insufficient access control, allowing remote attackers to (1) obtain database credentials via a direct request for config.inc, a...