EUVD-2008-5581

Malware in sbrugna...

Active News Manager CSRF Vulnerability (Add Admin)

Exploit for php platform in category web applications Active News Manager CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.gazatem.com/Products/activenewsmanager.asp === Exploit...

Gnews Publisher .NET SQL Injection

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Gnews Publisher download : null Demo : http://www.gazatem.com/demos/gnews/ Exploits : --=SQL INJECTION=--...

CVE-2008-5606

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb...

Improper access control

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb...

CVE-2008-5606

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb...

CVE-2008-5606

CVE-2008-5606 affects Gazatem QMail Mailing List Manager 1.2. The issue is insufficient access control: sensitive data is stored under the web root, allowing remote attackers to download the database file qmail.mdb via a direct request. The Connected documents do not provide additional technical ...

Gnews Publisher .NET (authors.asp authorID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Gnews Publisher .NET authors.asp authorID SQL Injection Vulnerability =======================================================================...

CVE-2008-5606: Undefined Security Weakness

Gazatem QMail Mailing List Manager 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for qmail.mdb...

gNews Publisher SQL Injection Vulnerabilites

Aria-Security's Research Team www.Aria-Security.Com For further help Original Advisory at: http://www.aria-security.com/forum/showthread.php?t=37 ----------------------------------------- Software: gNews Publisher Vendor: http://gazatem.com Method: SQL Injection Poc:...