CVE-2011-3587

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...

CVE-2011-3587

A remote code execution vulnerability exists in Zope 2.12.x and 2.13.x , as utilized in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2. The root cause is the failure to properly validate user-supplied input, specifically via vectors related to the p_ class in OFS/misc_.py and the use of Py...

CVE-2011-3587: Undefined Security Weakness

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...

PT-2011-4542

Name of the Vulnerable Software and Affected Versions Zope versions 2.12.x through 2.13.x Plone versions 4.0.x through 4.0.9 Plone version 4.1 Plone versions 4.2 through 4.2a2 Description The issue allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/mis...

Exploit Pack - An open source security framework

Exploit Pack - An open source security framework Exploit Pack is an open source security framework developed by Juan Sacco. It combines the benefits of a Java GUI, Python as Engine and well-known exploits on the wild. It has an IDE to make the task of developing new exploits easier, instant searc...

Portable OpenSSH < 3.8p1 Multiple Vulnerabilities

According to its banner, a version of OpenSSH earlier than 3.8p1 is running on the remote host and is affected by the following issues: - There is an issue in the handling of PAM modules in such versions of OpenSSH. As a result, OpenSSH may not correctly handle aborted conversations with PAM...

CVE-2011-3808: Exposure of Sensitive Information to an Unauthorized Actor

The Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/svnintegration/config.inc.php and certain other files...

CVE-2011-3822: Exposure of Sensitive Information to an Unauthorized Actor

XOOPS 2.5.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/system/xoopsversion.php and certain other files...

PT-2011-4712

Name of the Vulnerable Software and Affected Versions XOOPS version 2.5.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as modules/system/xoops version.php, which reveals the...

PT-2011-4683

Name of the Vulnerable Software and Affected Versions Pixie version 1.04 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files, which reveals the installation path in an error message. This can be demonstrated by accessing files...

PT-2011-4698

Name of the Vulnerable Software and Affected Versions The Bug Genie version 2.1.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as modules/svn integration/config.inc.php, which...

CVE-2011-3793: Exposure of Sensitive Information to an Unauthorized Actor

Pixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/modules/static.php and certain other files...

Information disclosure

CMS Made Simple CMSMS 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain other files. NOTE: this might overlap CVE-2007-5444...

Information disclosure

HelpCenter Live 2.1.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/HelpCenter/index.php and certain other files...

PT-2011-4587

Name of the Vulnerable Software and Affected Versions Achievo version 1.4.5 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by files such as modules/graph/jpgraph/jpgraph radar.php, which reveals the...

PT-2011-4614

Name of the Vulnerable Software and Affected Versions CubeCart version 4.4.3 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by files such as modules/shipping/USPS/calc.php, which reveals the installation path...

CVE-2011-3702: Exposure of Sensitive Information to an Unauthorized Actor

Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/template.php and certain other files...

CVE-2011-3724: Exposure of Sensitive Information to an Unauthorized Actor

CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files...

PT-2011-4592

Name of the Vulnerable Software and Affected Versions Ananta Gazelle version 1.0 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by files such as modules/template.php, which reveals the installation path in an...

PT-2011-4608

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions 1.9.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, this can be...