CVE-2008-5592

CVE-2008-5592 affects Nightfall Personal Diary 1.0. The issue is improper access control: sensitive data is stored under the web root, allowing remote attackers to download the database file (users-zza21.mdb) via a direct request. The resulting impact is partial confidentiality loss. The availabl...

ASP-DEv XM Diary SQL Injection / Database Disclosure

--------------------------------------------------------- Portal Name: ASP-DEv XM Diary Vendor : http://www.asp-dev.com Dork : Powered by ASP-DEv XM Diary Author : PouyaServer , [email protected] Vulnerability : SQL,DD --------------------------------------------------------- SQL:...

ASP-DEV XM Events Diary - cat SQL Injection

ASP-DEV XM Events Diary - cat SQL Injection source: https://www.securityfocus.com/bid/32809/info ASP-DEV XM Events Diary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

ASP-DEV XM Events Diary - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/32809/info ASP-DEV XM Events Diary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

NightFall Personal Diary 1.0 (XSS/DD) Multiple Remote Vulnerabilities

No description provided by source. -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script...

NightFall Personal Diary 1.0 (XSS/DD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== NightFall Personal Diary 1.0 XSS/DD Multiple Remote Vulnerabilities =====================================================================...

nightfall personal diary 1.0 - Cross-Site Scripting / File Disclosure

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : NightFall download :...

tDiary cross-site request forgery vulnerability

Overview tDiary, a weblog system from the tDiary development project, contains a cross-site request forgery CSRF vulnerability. Impact If a user loads a malicious web page, an attacker could alter or delete the diary text or alter tDiary configurations. In addition, a remote attacker could execut...

Simple PHP Blog多个安全漏洞

Simple PHP Blog是一款基于PHP的网络日记程序。 Simple PHP Blog不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞对应用程序进行各种攻击。 问题包括如下： -IP伪造 -HTML注入 -会话固定 -开放EMAIL RELAY -本地文件包含 -跨站请求伪造 -任意文件上传。 攻击者利用这些问题可破坏受影响的应用程序，以WEB服务进程权限执行任意代码。发送任意恶意邮件，或窃取COOKIE等信息。 Simple PHP Blog Simple PHP Blog 0.5.1 Simple PHP Blog Simple PHP Blog 0.4.8 Simpl...

EZContents 2.0.3 - event_list.php?GLOBALS[admin_home] Remote File Inclusion

EZContents 2.0.3 - eventlist.php?GLOBALSadminhome Remote File Inclusion source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...

EV0075.txt

New eVuln Advisory: Teca Diary PE SQL Injection Vulnerability http://evuln.com/vulns/75/summary.html --------------------Summary---------------- eVuln ID: EV0075 CVE: CVE-2006-0729 Software: Teca Diary PE Sowtware's Web Site: http://www.teca-scripts.com Versions: 1.0 Critical Level: Moderate Type...

[eVuln] Teca Diary PE SQL Injection Vulnerability

New eVuln Advisory: Teca Diary PE SQL Injection Vulnerability http://evuln.com/vulns/75/summary.html --------------------Summary---------------- eVuln ID: EV0075 CVE: CVE-2006-0729 Software: Teca Diary PE Sowtware's Web Site: http://www.teca-scripts.com Versions: 1.0 Critical Level: Moderate Type...

Sql injection

SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 yy, 2 mm, and 3 dd parameters...

CVE-2006-0729

SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 yy, 2 mm, and 3 dd parameters...

CVE-2006-0729

SQL injection vulnerability CVE-2006-0729 affects Teca Diary PE 1.0 in script functions.php, where un-sanitized parameters yy, mm, and dd allow remote attackers to inject arbitrary SQL. The issue is remote and results in possible arbitrary queries; exploit details are provided in eVuln/PacketStor...

[SA18876] Teca Diary Personal Edition SQL Injection Vulnerability

TITLE: Teca Diary Personal Edition SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18876 VERIFY ADVISORY: http://secunia.com/advisories/18876/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Teca Diary Personal Edition 1.x http://secunia.com/product/8089...

PluggedOut-1.9.9c.txt

PluggedOut Blog SQL INJECTION and XSS PluggedOut Blog is an open source script you can run on your web server to give you an online multi-user journal or diary. It can be used equally well for any kind of calendar application.Rather than give you a thousand things you don't really want...