bxcp0297.txt

Title: Local .php file inclusion and full path disclosure in BXCP = 0.2.9.7 Author: OfB|FistFucker Contact: http://www.ofb-clan.de/ ofb-clan at irc.quakenet.org:6667 1. Local .php file inclusion: --------------------------------- Because of no user input validation in 'index.php' it's possible to...

CVE-2004-1565

CVE-2004-1565 affects w-Agora 4.1.6a: list.php exposes the full server path via a crafted HTTP request to an id parameter (path disclosure). The connected Nessus entry notes multiple input validation issues in the remote software, including SQL injection and XSS vectors, but does not provide a pa...

CVE-2004-1577

index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message...

CVE-2004-1571: Undefined Security Weakness

AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to 1 auto-acronyms.php, 2 auto-archive.php, 3 ount-article-views.php, 4 kses.php, 5 custom-quick-tags.php, 6 disable-all-comments.php, 7 easy-date-format.php, 8 enable-disable-comments.php, 9...

CVE-2004-1565: Undefined Security Weakness

list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter...

CVE-2004-1528: Undefined Security Weakness

The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to 1 config.php, 2 index.php, or 3 submit.php, which reveal the full path in an error message...

CVE-2005-0459: Undefined Security Weakness

phpMyAdmin 2.6.2-dev, and possibly earlier versions, allows remote attackers to determine the full path of the web root via a direct request to selectlang.lib.php, which reveals the path in a PHP error message...

[Full-Disclosure] [waraxe-2005-SA#040] - Full path disclosure and XSS in PhpNuke 6.x-7.6

================================================================================ waraxe-2005-SA040 ================================================================================ Full path disclosure and XSS in PhpNuke 6.x-7.6...

CVE-2005-0433: Undefined Security Weakness

Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to 1 db.php, 2 mainfile.php, 3 Downloads/index.php, or 4 WebLinks/index.php, which lists the path in a PHP error message...

GLSA-200501-08 : phpGroupWare: Various vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-08 phpGroupWare: Various vulnerabilities Several flaws were discovered in phpGroupWare making it vulnerable to cross-site scripting attacks, SQL injection, and full path disclosure. Impact : These vulnerabilities could allo...

[PersianHacker.NET 200502-05] WWWoard passwd

Persianhacker.net Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final WWWBoard is a threaded World Wide Web discussion forum and message board, which allows users to post new messages, followup to existing ones and more. The current release in 2.0 ALPHA 2.1, which means there still are a...

[PersianHacker.net] Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final

In the name of GOD Persianhacker.net Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final PafileDB paFileDB is designed to allow webmasters have a database of files for download on their site. To add a download, all you do is upload the file using FTP or whatever method you use, log into...

Vulnerabilities in eXponent 0.95

ECHOADV02$2004 --------------------------------------------------------------------------- Vulnerabilities in eXponent --------------------------------------------------------------------------- Author: y3dips Date: Januari, 25th 2005 Location: Indonesia, Jakarta Web:...

Multiple vulnerabilities in MercuryBoard 1.1.1

CODEBUG Labs Advisory 7 Title: Multiple vulnerabilities in MercuryBoard 1.1.1 Author: Alberto Trivero English Version: Alberto Trivero Product: MercuryBoard 1.1.1 Type: Multiple Vulnerabilities Web: http://www.codebug.org/ -- Software Page www.mercuryboard.com "MercuryBoard is a powerful message...

codebug7.txt

CODEBUG Labs Advisory 7 Title: Multiple vulnerabilities in MercuryBoard 1.1.1 Author: Alberto Trivero English Version: Alberto Trivero Product: MercuryBoard 1.1.1 Type: Multiple Vulnerabilities Web: http://www.codebug.org/ -- Software Page www.mercuryboard.com "MercuryBoard is a powerful message...

waraxe-2005-SA039.txt

================================================================================ waraxe-2005-SA039 ================================================================================ Critical Sql Injection in Sgallery module for PhpNuke...

SugarSales Multiple Vulnerabilities

------------------------------------------------------------------------- | SugarSales Multiple Vulnerabilities | ------------------------------------------------------------------------- Date: 12-11-2004 Author: Daniel Fabian Product: SugarSales formerly SugarCRM Affected Version: up to 2.0.1c...

CVE-2004-1205: Undefined Security Weakness

codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message...

F-Secure Policy Manager 5.11 - 'FSMSH.dll' CGI Application Installation Full Path Disclosure

source: https://www.securityfocus.com/bid/11869/info F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the vulnerable software will return an error message that includes the installation path of the...

waraxe-2004-SA038.txt

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...