9635 matches found
CVE-2007-3910
Bandersnatch 0.4 is affected by an XSS vulnerability (CVE-2007-3910) where remote attackers can inject arbitrary JavaScript via a Jabber resource name (and possibly other data items) that are stored in conversation logs. Multiple sources in the connected set corroborate the issue and describe the...
Design/Logic Flaw
The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to read a list of missed calls, received calls, and dialed numbers via a direct request to the web server on port 1800...
CVE-2007-3439
The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to read a list of missed calls, received calls, and dialed numbers via a direct request to the web server on port 1800...
CVE-2007-3200
NMASINST in Novell Modular Authentication Service NMAS 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file...
yapig-exec.txt
" The variables receives by the form POST: - integer $gid the gid of the gallery - interger $phid the phid of the image - string $tit title of the comment - string $author author name - string $mail comment authoer email - string $web comment author web - string $msg comment itself @package user ...
PHP-Nuke Module eBoard 1.0.7 - GLOBALS[name] Local File Inclusion
PHP-Nuke Module eBoard 1.0.7 - GLOBALSname Local File Inclusion !Perl PHP-Nuke Module eBoard 1.0.7 GLOBALSname Local File Inclusion Exploit Vendor: http://www.complex-berlin.de/modules.php?name=Downloads&dop=getit&lid=975 Coded by bd0rk || SOH-Crew Greetz: str0ke, TheJT, MereX, mymaster use...
DirectAdmin persistant XSS [takeover an Administrator`s account]
Subject: DirectAdmin persistant XSS takeover an Administrators account + Version: DirectAdmin 1.29.3 + Discovered by: Kanedaaa: http://kaneda.bohater.net + DirectAdmin Description: DirectAdmin is a popular, advanced Web Control Panel with many features for webhosting. www.directadmin.com +...
sBLOG 0.7.3 Beta - '/inc/lang.php' Local File Inclusion
!/usr/bin/perl sBLOG 0.7.3 Betainc/lang.phpLocal File Inclusion Exploit D.Script: http://sourceforge.net/projects/sblog/ V.Code: ifisset$conflangdefault && fileexists'lang/' . $conflangdefault . '.php' require'lang/' . $conflangdefault . '.php'; Discovered & Coded by : GolDM = Mahmoodali...
PHP-Nuke Module AddressBook 1.2 - Local File Inclusion
!Perl PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit Vendor: http://www.sb-websoft.com/index.php?name=CmodsDownload&file=index&req=getit&lid=14 Vulnerable Code: requireonce"modules/$modulename/include/func.inc.php"; Coded by bd0rk || SOH-Crew Greetz: str0ke, TheJT, saint, CodeR, rgo...
CVE-2007-1597
Unclassified NewsBoard 1.6.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain 1 the board log via a direct request for logs/board-YYYY-MM-DD.log, 2 the mail and private message PM log via a direct request for...
pragmaMX Module Landkarten 2.1 (Windows) - Local File Inclusion
!Perl pragmaMX Landkartenmodule 2.1 Local File Inclusion Exploit Vendor: http://www.pragmamx.org/Downloads-op-getit-lid-599-noJpC-.html Vulnerable Code: requireonce"modules/$modulename/inc/conf.php"; Coded by bd0rk || SOH-Crew Greetz: str0ke, Diddi, seduce, TheJT, broken-error use IO::Socket; use...
Unclassified NewsBoard 1.6.3 multiples logs disclosure
board log disclosure : can see the board log in :http://site.com/unblib/logs/board-2007-03-16.log mail disclosure : can see every mail/pm sended in : http://site.com/unblib/logs/email-YY-MONTH-DAY-HOURS-MINUTS-SEC.log sql error disclosure : can see every error sql :...
Apache, IIS and other http servers allow by sending a carriage return character forged log-vulnerability warning-the black bar safety net
Description: The majority of the http server receives contains%0d%0a the request resolves to a carriage return and in the log wraps, the use of this A feature can be falsification of logs. Details: Most http servers support-such as%0 0 encoding of request, the main purpose is to provide reliable...
DEBIAN-CVE-2006-7162
PuTTY 0.59 and earlier uses weak file permissions for 1 ppk files containing private keys generated by puttygen and 2 session logs created by putty, which allows local users to gain sensitive information by reading these files...
CVE-2006-7162
PuTTY 0.59 and earlier uses weak file permissions for 1 ppk files containing private keys generated by puttygen and 2 session logs created by putty, which allows local users to gain sensitive information by reading these files...
CVE-2006-7162
PuTTY 0.59 and earlier is affected by weak file permissions on (1) ppk files containing private keys and (2) session logs, enabling local users to read sensitive information. The connected Red Hat, Ubuntu, Debian, OSV, and CVE aggregations confirm the same issue across multiple sources. Root caus...
CVE-2006-7162
PuTTY 0.59 and earlier uses weak file permissions for 1 ppk files containing private keys generated by puttygen and 2 session logs created by putty, which allows local users to gain sensitive information by reading these files...
WordPress < 2.1.1 Multiple Script Backdoors
The version of WordPress installed on the remote host appears to include a backdoor that allows an unauthenticated, remote attacker to execute arbitrary code on the remote host, subject to the permissions of the web server user id. %NASLMINLEVEL 70300 Tenable Network Security, Inc...
Deleting user does not remove the user from a permission scheme
If a single user is added to a permission in a permission scheme, deleting this user will not remove him/her from the permission scheme. This results in stack traces in the logs such as: noformat 2007-02-14 14:10:57,882 WARN atlassian.jira.scheme.AbstractSchemeManager 'fred' is not a valid user...
Deleting user does not remove the user from a permission scheme
If a single user is added to a permission in a permission scheme, deleting this user will not remove him/her from the permission scheme. This results in stack traces in the logs such as: noformat 2007-02-14 14:10:57,882 WARN atlassian.jira.scheme.AbstractSchemeManager 'fred' is not a valid user...