Lucene search
K

9 matches found

NVD
NVD
added 2009/01/06 5:30 p.m.8 views

CVE-2008-5855

myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt...

5CVSS6.5AI score0.05896EPSS
Exploits0References4
Cvelist
Cvelist
added 2009/01/06 5:0 p.m.16 views

CVE-2008-5855

myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt...

6.5AI score0.05896EPSS
Exploits0References4
CVE
CVE
added 2009/01/06 5:0 p.m.34 views

CVE-2008-5855

The CVE-2008-5855 entry concerns myPHPscripts Login Session 2.0, where sensitive data is stored under the web root with insufficient access control. The underlying issue is exposure of a users.txt file, which can allow remote attackers to discover usernames, e-mail addresses, and password hashes ...

5CVSS6.7AI score0.05896EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2009/01/06 5:0 p.m.45 views

CVE-2008-5854

CVE-2008-5854 affects myPHPscripts Login Session 2.0: vulnerable is login.php in the User form (ls_user, ls_email) during an ls_register action, enabling stored/reflective XSS by remote attackers to inject arbitrary web script/HTML. The NVD entry confirms the vulnerability and its CVSS base metri...

4.3CVSS5.9AI score0.03701EPSS
Exploits0References5Affected Software1
Packet Storm
Packet Storm
added 2008/12/30 12:0 a.m.23 views

myPHPscripts Login Session 2.0 XSS / Database Disclosure

START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian Greets: : XaDoS,...

0.4AI score
Exploits0
seebug.org
seebug.org
added 2008/12/21 12:0 a.m.17 views

myPHPscripts Login Session 2.0 XSS/Database Disclosure Vulns

No description provided by source. START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes :...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2008/12/19 12:0 a.m.44 views

myPHPscripts Login Session 2.0 - Cross-Site Scripting / Database Disclosure

START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian Greets: : XaDoS,...

7.4AI score
Exploits0
0day.today
0day.today
added 2008/12/19 12:0 a.m.26 views

myPHPscripts Login Session 2.0 XSS/Database Disclosure Vulns

Exploit for unknown platform in category web applications ============================================================ myPHPscripts Login Session 2.0 XSS/Database Disclosure Vulns ============================================================ START 0x01 Informations: Script : myPHPscripts Login...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2008/12/19 12:0 a.m.8 views

myPHPscripts Login Session 2.0 - Cross-Site Scripting Database Disclosure

myPHPscripts Login Session 2.0 - Cross-Site Scripting Database Disclosure START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit...

0.4AI score
Exploits0
Rows per page
Query Builder