RunCMS 1.1 - Database Configuration Information Disclosure

RunCMS 1.1 - Database Configuration Information Disclosure source: https://www.securityfocus.com/bid/12848/info RunCMS is reportedly affected by an information disclosure vulnerability. This issue is due to a failure in the application to secure sensitive information. Exploitation of this...

CVE-2003-0491

The CVE-2003-0491 entry affects the Tutorials 2.0 module in XOOPS and E-XOOPS. It describes a remote code execution via uploading a PHP file without an image MIME type, then directly accessing the uploaded file. This is the stated vulnerability path and impact; no remediation details are provided...

Directory traversal vulnerability on Xoops/E-xoops CMS module "tutorials"

An attacker can use this flaw to execute arbitrary code of his choice on the remote system, run with the privileges of httpd. The code can be written in any scripting language whose parser is run in the remote system in cooporation with httpd, whether as module or executable. Details: This...