472 matches found
Macromedia ColdFusion MX 6.0 - Remote Development Service File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8109/info A vulnerability has been reported for the RDS service that may allow an attacker to obtain unauthorized access to a data residing on a ColdFusion MX server. The vulnerability is due to the way that authenticatio...
PHP 5.2.10/5.3 'ini_restore()' Memory Information Disclosure Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/36009/info PHP is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. ?php inisetsession.savepath, 0123456789ABCDEF;...
SurgeLDAP 1.0 Web Administration Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10294/info SurgeLDAP is an LDAP server implementation for Microsoft Windows and various Unix operating systems. It includes a built-in web server to permit remote user access via HTTP. It has been reported that the...
Linux Kernel 2.6.x 'sock.c' SO_BSDCOMPAT Option Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33846/info The Linux Kernel is prone to an information-disclosure vulnerability because it fails to properly initialize certain memory before using using it in a user-accessible operation. Successful exploits will allow...
Easypx41 Multiple Variable Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14421/info Easypx41 is prone to multiple variable injection vulnerabilities. An attacker can manipulate multiple script input variables and bypass access controls to retrieve sensitive and privileged information...
MKPortal 1.0.1 Index.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18707/info MKPortal is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...
Netbula Anyboard 9.9.5 6 Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8490/info A vulnerability has been reported in Netbula Anyboard that may allow a remote attacker to gain access to sensitive data. This problem is due to an information disclosure issue that can be triggered by an attacke...
ArsDigita Community System 3.4.x Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22121/info ArsDigita Community System is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from...
Clever Copy 3.0 Connect.INC Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17461/info Clever Copy is prone to an information-disclosure vulnerability. A remote attacker could leverage this issue to gain access to sensitive configuration information. The attacker could then use this information t...
JBoss 3.x/4.0.2 Malformed HTTP Request Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13985/info JBoss is prone to a remote information-disclosure vulnerability. The issue occurs in the 'org.jboss.web.WebServer' class and is due to a lack of sufficient sanitization of user-supplied request data. Informatio...
Sage 1.0 beta 3 Content Management System Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6893/info Sage Content Management System contains a path disclosure vulnerability. When a request is made for a module that does not exist, the returned error message contains the full path to the Sage installation...
Nuke Bookmarks 0.6 Marks.php Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12906/info Nuke Bookmarks is prone to a path disclosure issue when invalid data is submitted. This issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable...
geoBlog MOD_1.0 deleteblog.php id Variable Remote Arbitrary Blog Deletion
No description provided by source. source: http://www.securityfocus.com/bid/24966/info geoBlog is prone to multiple security-bypass vulnerabilities because the application fails to properly validate users when deleting user blogs and comments. An attacker may exploit these issues to delete blogs...
iCat Electronic Commerce Suite 3.0 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2126/info iCat Electronic Commerce Suite is an application which enables a user to create and manage web based catalogues. A remote user may retrieve known files on a target system running iCat Electronic Commerce Suite...
ToendaCMS 1.0.4 Media.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20170/info toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that cou...
Planetmoon Guestbook Clear Text Password Retrieval Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7167/info A vulnerability has been reported in Planetmoon Guestbook. It has been reported that remote users may be able to retrieve clear text password lists. Access to this data may allow an attacker to carry out further...
phpwcms 1.2.5 -DEV random_image.php imgdir Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/15436/info phpWCMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to obtain sensitive information tha...
PHP-Nuke 6.0 - Multiple Path Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/6406/info Multiple path disclosure vulnerabilities have been discovered in PHP-Nuke. This issue occurs when requesting a PHP script that shouldn't be accessed directly. Exploiting this issue will cause the target server t...
Chameleon LE 1.203 Index.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19107/info Chameleon LE is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...
ShopCartCGI 2.3 gotopage.cgi Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful exploitation of this issue an attack...