CVE-2006-6253

Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...

CVE-2006-6253

Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...

CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...

CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...

CVE-2006-6253

Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...

CVE-2006-6254

CVE-2006-6254 affects Cahier de texte 2.0, specifically the file administration/telecharger.php. The vulnerability allows remote attackers to read unparsed file content by supplying a chemin parameter, with evidence of directory traversal used to retrieve sensitive data (e.g., MySQL credentials f...

CVE-2006-6253

CVE-2006-6253 concerns Cahier de texte 2.0, which reportedly stores sensitive information under the web root. The vulnerability description indicates insufficient access control may allow remote attackers to directly request administration/dump.sql and obtain all users’ passwords. The connected d...

CVE-2006-6260

SQL injection vulnerability in login.asp of Redbinaria Sistema Integrado de Administracion de Portales (SIAP) allows remote attackers to execute arbitrary SQL commands via the username parameter. The issue is described in CVE-2006-6260 and covered by multiple sources (NVD, CVE list). Documented i...

15061124.txt

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/ Poc.link........

Cahier de texte 2.0 (Database Backup/Source Disclosure) Remote Exploit

No description provided by source. !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..:...

Cahier de texte V2.0 SQL Code Execution Exploit

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/ Poc.link........

Cahier de texte 2.0 (Database Backup/Source Disclosure) Remote Exploit

Exploit for unknown platform in category web applications ====================================================================== Cahier de texte 2.0 Database Backup/Source Disclosure Remote Exploit ====================================================================== !/usr/bin/perl INFORMATIONS...

Cahier de texte 2.0 - Database Backup Source Disclosure

Cahier de texte 2.0 - Database Backup Source Disclosure !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..:...

Cahier de texte 2.0 - Database Backup / Source Disclosure

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/ Poc.link........

RMSOFT-xss.txt

Cross Site Scripting In RMSOFT Catalogo de Imagenes URL: modules/rmgs/images.php?kw=alertdocument.cookie&q=search Google Dork: allinurl: /modules/rmgs/ Potenciado for XOOPS All Versions Greetz: ANtrAX,HANOWARS,4UREV01R & WWW.C-GROUP.ORG...

CVE-2006-5221

Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 matiereID parameter in lire.php or the 2 classeID parameter in lireafaire.php...

CVE-2006-5221

Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 matiereID parameter in lire.php or the 2 classeID parameter in lireafaire.php...

CVE-2006-5221

CVE-2006-5221 describes multiple SQL injection vulnerabilities in the PHP application “Cahier de texte 2.0.” The vulnerabilities allow remote attackers to execute arbitrary SQL commands by tampering with the (1) matiere_ID parameter in lire.php or the (2) classe_ID parameter in lire_a_faire.php. ...

Cahier de texte 2.0 (lire.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Cahier de texte 2.0 lire.php Remote SQL Injection Exploit =========================================================== Cahier de textes Pierre Lemaitre - St L? France - Ver 2.0...

Somery <= 0.4.6 (skin_dir) Remote File Include Vulnerability

No description provided by source. Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote File Inclusion Exploit" Vulnerable version: Somery 0.4.6 Operating System: - All OS Vendor URL: Robin de Graaf - [email protected] Somery website - http://somery.danwa.net Description: Somery, also known as...