Liesbeth Base CMS - Information Disclosure

source: https://www.securityfocus.com/bid/24749/info Liesbeth Base CMS is prone to an information-disclosure vulnerability. Exploiting this issue may allow an attacker to access sensitive information that may aid in further attacks. http://www.example.com/config.inc...

SHTTPD 1.38 - Filename Parse Error Information Disclosure

source: https://www.securityfocus.com/bid/24618/info SHTTPD is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects SHTTPD 1.38; other versions may also be affected...

SHTTPD 1.38 - Filename Parse Error Information Disclosure

SHTTPD 1.38 - Filename Parse Error Information Disclosure source: https://www.securityfocus.com/bid/24618/info SHTTPD is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects SHTTPD...

MyServer 0.8.9 - Filename Parse Error Information Disclosure

MyServer 0.8.9 - Filename Parse Error Information Disclosure source: https://www.securityfocus.com/bid/24571/info MyServer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects...

MyServer 0.8.9 - Filename Parse Error Information Disclosure

source: https://www.securityfocus.com/bid/24571/info MyServer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects MyServer 0.8.9; other versions may also be affected...

BugHunter HTTP Server 1.6.2 - Parse Error Information Disclosure

source: https://www.securityfocus.com/bid/24566/info BugHunter HTTP Server is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information. Information obtained may lead to further attacks. This issue affects HTTP Server 1.6.2; other...

Microsoft Windows XP2003 - ReadDirectoryChangesW Information Disclosure

Microsoft Windows XP2003 - ReadDirectoryChangesW Information Disclosure // source: https://www.securityfocus.com/bid/22664/info Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker may leverage this issue to gain access to potentially sensitive information...

phpTrafficA 1.4.1 - 'plotStat.php?File' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/22655/info phpTrafficA is prone to multiple directory-traversal vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable system in...

Default Password (oracle) for 'oracle' Account

The password for the account 'oracle' on the remote host is 'oracle'. An attacker may leverage this to gain access to the affected system and launch further attacks against it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "oracle"; password = "oracle";...

A.I-Pifou 1.8 - 'Choix_langue.php' Directory Traversal

source: https://www.securityfocus.com/bid/20120/info A.I-Pifou is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affecte...

MyBulletinBoard (MyBB) 1.x - usercp.php Directory Traversal

MyBulletinBoard MyBB 1.x - usercp.php Directory Traversal source: https://www.securityfocus.com/bid/19195/info MyBulletinBoard is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrar...

Chameleon LE 1.203 - index.php Directory Traversal

Chameleon LE 1.203 - index.php Directory Traversal source: https://www.securityfocus.com/bid/19107/info Chameleon LE is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files fr...

Chameleon LE 1.203 - 'index.php' Directory Traversal

source: https://www.securityfocus.com/bid/19107/info Chameleon LE is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the...

PlanetGallery - Gallery_admin.php Authentication Bypass

PlanetGallery - Galleryadmin.php Authentication Bypass source: https://www.securityfocus.com/bid/17753/info PlanetGallery is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. An attacker can exploit this...

Scry Gallery - Directory Traversal

Scry Gallery - Directory Traversal source: https://www.securityfocus.com/bid/17649/info Scry Gallery is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve...

Clever Copy 3.0 - Connect.INC Information Disclosure

Clever Copy 3.0 - Connect.INC Information Disclosure source: https://www.securityfocus.com/bid/17461/info Clever Copy is prone to an information-disclosure vulnerability. A remote attacker could leverage this issue to gain access to sensitive configuration information. The attacker could then use...

Revize CMS - 'Revize.XML' Information Disclosure

source: https://www.securityfocus.com/bid/15482/info Revize CMS is prone to an information disclosure vulnerability. This issue is due to a failure in the application to restrict access to sensitive files. An attacker can exploit this vulnerability to retrieve sensitive information. Information...

PHP Advanced Transfer Manager 1.30 - Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/14883/info PHP Advanced Transfer Manager is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Exploitation of any of these vulnerabilities could lead to a...

SaveWebPortal 3.4 - Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/14643/info SaveWebPortal is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Exploitation of this vulnerability could lead to a loss of confidentiality an...

Easypx41 - Multiple Variable Injection Vulnerabilities

source: https://www.securityfocus.com/bid/14421/info Easypx41 is prone to multiple variable injection vulnerabilities. An attacker can manipulate multiple script input variables and bypass access controls to retrieve sensitive and privileged information. Information obtained may aid in further...